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(U/ /FOUO ) On September 14, 2015^ 


Jsocial security number 

Investigation (FBI) Special Agent (SA)[ t 

for the intervi ew was Department of Justice (DOJ) Attorney [ 




Platte River Networks, date of birth 


intervi ewed by Federal Bureau of 


and SA : 


land! 


attorney at the] 

nature of the interview^ 


Also present 


Afte r being advised of the identity of the interviewing agents and the 
provided the following: 


(U/ /FOUO ) As 


I 


general role with the client and not involved with technical details, 
general direction of the business. 


described his role at PRN as a 


main concern is the 


(U//F OUO) Platte River Networks (P RN) work ed with an individual named 


to 


identity business opportunities. In early 20 1 3 | [ brought them a client opportunity who she claimed 

once worked as a public official. After submitting a bid to do the work, PRN became aware the contract 
they were bidding on was for the management of an email server hosting domains associated with BILL 
CLINTON, HILLARY CLINTON and their aides. PRN won the bid for the contract and the account was 
under the name CESC. 


determinedT 


(U/ /FOUO) PRN wanted to limit the employees working on the C ESC server, so it was 


j who worked remotely on the server, andj 


who 

handled the server on-site, would be the technical team doing most of the work.| vas aware 

that PRN picked up an old server from the CLINTON residence and delivered it to Equinix, a datacenter 
in Secaucus, New Jersey. PRN ordered and installed new server ha rdware at Equin ix and migrated all 
CESC email from their old server to the new PRN provided server. f~ ~l was aware that PRN 

maintained a back-up of the server known as a DATTO. The DATTO was located at Equinix and worked 
by taking snapsh ots of the server and mai ntaining tha t data for up to 6 0 days before it was deleted. 


leferred to | |f or specifics, 

Enterprise Server managed by PRN, but deferred to 


vas also aware of a BlackBerry 
Jon the specifics. 


(U// FQUO ) In or around March 201 5^ 


|was involved in conversations with CESC 
where they req ue sted to know wh at email they had, where it was, and how it was backed up. 

and handled this request and would know more details. CESC never asked 


investigation on 09/14/2015 
File # 


at 


Denver. Colorado 



302 - VZ-. 

Date dictated N/A 


j/t/i 

| 

L 


By a 


sa[ 


>2oiS 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b3 

b7E 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b6 

b7C 




PD-302a (Rev. 10-6-95) 


Continuation of FD-302 of 


Interview o 


£ 


On 07/23/2015. Page 


for administrator rights to the PRN server or for physicaJ access to the server at Equinix, 
believed CESC was still a PRN client and were operating under the same contract they originally signed. 


(U/ /FOU O) 


CESC email server run by PRN. 


didn’t believe there was a successful intrusion attempt against the 
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fUZ/PO KO) On May 23 . 2016, 


secu rity numbed 

(SAj 


date of birtW 


social 


was interviewed b y Federal Bureau of Investigation (FBI) Special Agent 
landSA T | at the offices of Platte River Networ ks (PRN) located a t 


5700 Washington Stre et. Denver. Colora do 80216. Also prese nt for the interview was 


both attorneys at the[ 


and via speaker phone 
the identity of the interviewing agents and the nature of the interview, 
following information: 


I Aft er being advised of 
Jprovided the 


(U//F0«©) 


pas not aware of a laptop containin g an archive of e mail belonging to 


HILLARY CLINTON that was shipped to PRN around February 2014. 
what became of the foregoing laptop. 


was not aware 


b*L 


X 


(u/zpouef 


Jonly recently was made aware of a CLINTON email archive file being 
tra nsmitted to the Clinton Executive Ser vices Corporation (CESC) around July 2014 and September 2014 

| Kvas not aw are of the request by CESC, or transmittal by 

as it w as occurring! |was not aware of what specifically was requested by 


CESC or exactly howj 


(U//F0H9). 

October 2014 to January 2015 
shred their email records. As a] 
technical details of any PRN c 


^fulfilled the request. 

~[vas not awa re of any support PRN provided the CESC client from 
~|was not aware of any CESC req uest to delete, wipe or 


would not pay attention to 


lent. 


(U/ /FQUQ) At this point in the inte rview. Agents displayed PRN provided records and email from 
;. provided the following information: 


the March 2015 timeframe. 


(U/ /FQUO) In March 2015, when various media outlets reported a private email domain and 
server was used by HILLARY CLINTON, PRN decided to cre ate an internal “ share drive” and control 


access to only the PRN employees working the CESC account.| |stated PRN did have back- 

ups of their own servers. PRN never deleted information pertaining to the CESC client and provided the 
FBI all records they maintained pertaining to CESC. 
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(U/ /FQU O) In March 2015 


On 07/23/2015, Page 


content, to include where it existed. PRN employee! 


stated CESC requeste d an inventory of all their email 
travelled to the Equinix 


was 


data center in Secuacus, New Jersey where the CESC server equipment was located.[ 

not a party t o the discussion involving CESC’ s request for inv entory, therefore did not know specific 
instructions] |did not recall what] [specifically found on the server equipment. 

(U/ /TOUO) After Agents di splayed an email dated March 09, 2015 where CHERYL MILLS 
discussed preservation of materials,] 
preserve CESC related data. 


jcould not recall any other request by any entity to 


(U/ /FQUOX 
31,2015 with CESC.I 
or shredded. Recently^ 


has no recollection of a conference call on March 25, 2015 or March 
I stated CESC never re quested their em ail content by deleted, wiped 
Jvas made aware that] |used Bleach bit software to 


shred .pst em ail files contain ing CESC email content that was transferred to CESC. As 

understood it j Icre ated a “vehicle” to transfer email files from the live mailboxes of CESC 

email accounts ]" [ hen later used Bleachbit software to shred the “vehicle” but the email 

content still existed in the live email accounts. 


(U/ /FOUO) [ 


the DATTO device used to back-up the CESC email server. 


Iwas unaware of any PRN employee conducting manual deletions of 


(U//F©W©) 


was unaware of any successful computer intrusion of the CESC server. 

(will be maintained 


(U// FQUQ) Notes of the interview and documents displayed tcj 
in a FD340 envelope and filed with the captioned investigation. 
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(U//FOya) On April 19, 2016f 
social security account nu mber (SSAN l 
(FBI) Special Agents ( SA) 


llocated at 

attorneys! 


1*4 


date of birth (DOB)| J and 

was interv'iewed bv Federal Bureau of I nvestigat ion 
at the law offices 


f 1m 

4 


Wa shington DC 20005. Also present for the interview were 
landl ! . After being advised of the identity of the 


interviewing Agents, and the nature of the interview ] [ provided the following information: 


ht the White 


is currently thej] 


|met President WIL LIAM CLINTON 
House in the fall ot I After his£ 


and HILLARY C LINTON when he became an 
served in various positions in 


the CLINTON White House and continued to work for President CLINTON after his presidency. 

(U// FBUQ ) In the years after President CLINTON left the White House, CLINTON’S staff 
managed certain details related to the information technology needs of CLINTON’S office. One of those 
needs required negotiating with an individual who owned several .com domains related to CLINTON’S 
name. l R ecalled these domains to be presidentclinton.com, clintonfoundation.com, and owjc.com. 

Ultimately, negotiations were successful and the domains were purchased from the individual. 

(U/ /FOUQ) In 2006 or 2007, JUSTIN COO PER obta ined a private email server (Apple Server) 
for the office of President CLrNTON. COOPER an 
issues related to the previous outsourced server and 


had several conversations about reliability 
ecided it would be best to have a server under their 
physical control at the CLINTON’S residence in New York. COOPER handled the procurement and all 
aspects of server management, to include the creation of new account? or any requests to move email, 
believed (and 


3 


initially had email accounts on the Apple Server. | f ecalled a conversation 


with H UMA AB ELTTN and COOPER regarding the addition of HILLARY CLINTON to the A pple 


Server. | | thought it was a bad idea, but the issue had been decided by that point in time. 

believed the addition of HILLARY CLINTON to the Apple Server occurred w hile she w as in the Senate. 
CLINTON used BlackBerry devices obtained by COOPER to access her email. was not involved 

in the decision to move to a new server (Exchange Server), but recalled it was located, as was the Apple 
Server, in the basement of the CLINTON’S New York residence. 
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COOPER notifiec [ few times each year about attempted i ntrusions of the 

Jcould not recall any specific details. They shared a mutual concern _ 


system, but] i „ . . 

had too much private information about the CLINTONS and may have had access to some of their 
communications. 


(U// FOUO ) | | had no knowledge regarding the following topics: 

discussions to move to the Exchange Server 

personnel involved in the decision to move to the Exchange Server 

domains on the Apple Server or Exchange Server 

users on the Exchange Server 

disposition of the Apple Server or Exchange Server after decommissioning 
classified information on Apple Server or Exchange Server 

conversations concerning federal records as it related to the Apple Server or Exchange Server 
backups of the Apple Server or Exchange Server . 

. Sensitive Compartmented Information Facilities at the CLINTON’S New York or Washington, 
DC residences | did recall Secure Telephone Units in New York and Washington, DC) 

Secure fax machines or secure computers at the New York or Washington, DC residences 


b6 

b7C 


b6 

b7C 


b6 

b7C 


UNCLASSIFIED/ /fW 


FD-302a (Rev. 10-6-95) 


UNCLASSIFIED/ /FOUO 

- 1 - 

FEDERAL BUREAU OF INVESTIGATION 


ALL IHFORMAT IQH CQHTAINEE 

HERE 1 11 IS UNCLASSIFIED 

DATE 10-0S-I-015 3Y J37JS5T94 NSICC 


Date of transcription 06/09/2016 


(U//F OUO) On June 6. 2016 
social security numberl 


date of birth 


land SA 


w as interviewed by Feder al Bureau of Investigation (FBI) Special 


at the FBI Washington Field Office, 601 


Agent (SA)| 

4 ™ Street N W. Washington, DC 20535. Also present for the interview was FBI Intelligence Analyst 
After being advised of the identities of the interviewing agents and the purpose of the 


interview, 


provided the following information: 


(U//EOU6) works for| 

1 a defense contractor 

specializing in the areas of missile, space, and intelligence. In addition, 

lowns 


a company focuse d on domestic data acquisitio n which ( establishedin 


}ias several products to includ e[ 

Jp 


from the over 60 billion records in 


ossession. 


as well as other p roducts drawn 

Dark Horse Data, 


Inc. (DHD), a company owned by former Deputy Under Secretary of Defense for Intelligence 
REGINALD HYDE. DHD works with foreign data, can contract directly with the government, and 
frequently embeds its personnel with clients. 


a senior staff member of the United 
[out of conce rns data from HILLARY 


(U/ /POUO) In June or July 201 5 J 

States Senate Committee on the Judiciary, contacted 

CLINTON’S email server might end up overseas. Specifically 

was an intrusio n into CLIN TON’S server and, if so, whether exfiltrated data fell into the hands of a 


(wanted to determine if there 


foreign power. 
Marines. Addi 
Therefore, 


ional 


comprom ised. 


5 


was concerned any exfiltrated data could endanger her three sons, who are 


y, sh e was unset as a citizen and Senate Staff Member that this situation could occur. 

laskeq if it was possible to determine if CLINTON’S server had been 

Jstated he would have to look for data that was genuine, authentic, and relevant. 


defined those three terms as follows: 


Genuine - data originating from-CLINTON’s server 
Authentic - data that had not been altered 

Relevant - data from CLINTON’S server that was moved outside of the United States to a place 
where a foreign actor could access it 


(U/ /FOUO) Sincd 


September 2015 she met with NEW 


did not have funding fo r the projec t described above, in August or 


GINGRICH and asked 


ho brief GINGRICH on the project. 
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GINGRICH, and 


server had been compromised. 
December 2015, recommende 
the project as four phases to 



were all bothered by the potential that data from CLINTON’S 
wanted t o speak with oth ers about the proje ct and in 


speak with 


t 


% 


Judicial Watch. 


The phases were to determine if: 


briefed 


Phase 1 -CLINTON’S server was directly or indirectly attacked 

Phase 2 -SIDNEY BLUMENTHAL’s server was directly or indirectly attacked 

Phase 3 - data was exfiltrated outside the United States 

Phase 4 - data was exposed to a foreign actor 


Ad 


briefed the project, he raised the question of what the course of action would be if classified 

informatio n was unco vered. The three discussed it and decided Judicial Watch’s legal counsel should be 
consulted. 


never received an answer, but was of the opinion that if he uncovered data he 


thought might be classified, he would be obligated to report it to the appropriate authorities. 

(U//FOUO) In January or February 2016, Judicial Watch’s legal counsel advised the project was 
feasible, but could not involve accessing any systems without authorization. The project could review 
open s ource data following the four phases described above. After these initial discussions with Judicial 
Watch! Iconcluded the motivation of Judicial Watch’s actions was not centered on the elections. 


(U/ /TOUO) 


advised there are three potential funding streams for the types of projects 


his company undertakes. They can be funded by his company, a government contract, or a data 
arbitrageur. In this situation, the arbitrageur would invest in litigation on the prospect of a judge awarding 
the arbitrageur attorney’s fees. 


(U/ /FQUQ) In February or March 2016, 


ompany,| 

Watch to proceed with Phase 1. Judicial Watch awarded the contract tol 


} 


Ivas gi ven $32,000 by Judicial 
because_lhsy_W-gip 


had to 


confident he understood both the Deep Web and Dark Web. After receiving the contract, 
determine the best place to obtain the necessary data for the project. Based on the terms outlined by 
Judicial Watch’s counsel. (.I LINTO frJ and BLUM, ENTHAL’s respectiv e servers were offlimits, as were 


offshore servers. 


turned 


3N and BLUMEf 

t< | a 


former executive at 


a cyber intelligence 


company which inge sts d ata from th e Deep Web and Dark Web and, then, indexes the data. By 


leveraging d ata.1 J c o ul d searc h the Deep W eb and D ark Web without exposing his 


^ l r 

searches to the Int ernet! 


p r ov ide d 


.td 


paid 


$2,500 to have 


conduct searches based on search 


These search terms included, but were not limited to, HILLARY 


terms provided by 

CLINTON . SIDNEY BLUMENTAL. and an Inter net Proto col (IP) address range obtained from an email 
[by Judicial Watch. In return, ) lorovide d the results of those searches to 

:d b\| [or this project. 


which was 


the exclusive data source use> 


(U/ /FOUO 


reviewed the data pr ovided by 


BLUMENTHAL’s server on a server in Romania. 


Jnd 


found files from 


believed BLUMENTHAL had a personal 
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server because he found some of BLUMENTHAL’s files on the server in Romania, but not any of 
BLUMENTHAL’s emails. The Romanian server contained approximately 200 Microsoft Word, Excel, 
and other file types belonging to BLUMENTHAL. 


(U// PQUQ) In ref erence to a M ay 22, 2009 alleg ed intrusion of CLINTON’S server appearing in a 

i project ! | stated he could not recall where he learned of the 


draft version of a report on[ 
hack or the specific date. 


specula ted it was possibly from a public report, but he had looked for 


the source and could not find it. Therefore, [ 
iterations of the report. 


planned to remove the reference from future 


(U//F0tJO) During! 


b review of the data obtained by 


I h e found one sensitive 

Excel file listing the names of known or suspected jihadists in Libya. | added that a portion of the 

file was in Russian. The file did not come from BLUMENTHAL’s server, but contained a r eference to an 
IP address range that included the IP address of CLINTON’S server. Upon viewing this fileJJ 
became concerned he. 

Phase 1 and 


.had found a classified document and stopped the project. This work completed 
Jplanned to deliver the final report to Judicial Watch soon. 


(U//F OUO ) 


| stated some o f the BLUMENTHAL files were dated on or about January 

2012, which was the same timeframe when] | contacted! regarding the 

Libyan Rogue Nation Judgment Recovery Program (LRNJRP). 


Jelaimed he was hired 


hv the l.ih yan opposition government to recover the assets of the MUAMM AR GADDA FI government, 
also met with TYLER DRUMHELLER regarding the same matter. 


speculated 


BLUMENTHAL, if involved in the LRNJRP, could have written the memos as a “shake and bake” tactic. 


(UV/FOUff) A copy of the original interview notes and documents provided to the FBI by 
during the interview are enclosed in a 1A envelope. 
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On September 14, 201 5j 

Networks (PRN), date of birth social securft 

Federal Bur eau of Investigation (FBI) Specia Agent ISA if 
1 Also present for the inter view waj 
Department of Justice (DOJ) Attorney I A ftt 

interviewing agents and the nature of the interview,! 


Platte River 

viewe d by 


idvised of the identity of the 
Provided the following: 


On or about January 2013J |olj I contacted! [egarding 

potential busines s with a h igh profile former government client. 1 |had an existing 

relationship with ( because she previously referred other clients from a family wealth asset 

management firm. The potential client’s current email server architecture lost connecti vity during event* 
such as Hurricane Sandy, so they wanted better support than their existing arrangeme nt I 
with the assistance of other PRN personnel, put together a proposal and submitted it t d Once 

PRN was chosen as one of the three finalists for the contract, PRN was notified the potential client was 
WILLIAM CLINTON and HILLARY CLINTON, doing busin ess through a com pany named CESC. 

Ajjer PRN won_the„contracLl ItD.ok on. a smaller role an d [ worked primarily with 

a *td | I CESC wanted to keep the number of individuals 

working on the project small, so PRN identified three people as the only personnel allowed to work • 


WILLIAM CLINTON and 
After PRN won the .contras! 

and| 

working on the project smal 
directly on the CESC proiec 
signed in Aug ust 2013 as! 
ma nager), and 
and ! | handl id an 

work at Equinix, while 
work on the project. 


loss individuals were identified i 
. I (solution design), [ 
lelp desk). | did aPl 

matelv 10% of the work. 

handled everything else" ! 


;rvic.e. I .c.vcl .Agreement (SLA) 

((project 

nately 90% of the work for CESC 
Irole was to help with on-site 
[was ultimately not needed to 


Whe , La^-asked to review an email he sent discussing a new email address for 

HILLARY CLINTON, state q [ could not answer the question for attorney-client 

privilege reasons. A copy of the email is attached to this communication in an FD-340. 

PRN chose Equinix as the datacenter for CESC’s new email server (hereafter, PRN server) 
specifically because it.did not go down during Hurricane Sandy. This project was PRN’s first time using 
Equinix. j ransported CESC’s existing equipment (hereafter, predecessor server) and 

transported it to fcqumix, so the content of the predecessor server could be migrated to the new PRN 
server. 
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stated PRN used an outside firm, MX Logic, for spam filtering, but referred other 
technical - questions regarding snatij filtering, data migration, archives/backups, and Microsoft Exchange to 


sin d/or 


T 


had no knowledge of: 
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• Email servers used by CESC prior to the one transported by PRN to Equinix. 

• The existence of classified information on either server. 

• Discussions regarding federal records retention. 

• Intrusions to the PRN server. 
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date of birtW 


bV/f-ONQ-) On Mav 23. 2016 

number I was interviewed by F ederal Bureau of Investigation (FBI) Special Agent (S A) 


and S/[ 


the offices of Platte River Netwo: 
Washington Street. Denver. Colorado 80216. Also pr esent for the intervie w wa: 


Fed 

Jat 


social security 


speaker phone 
identity of the 
information: 


both attorneys at thej 


interviewing agents and the nature of the interview J 



.at 5700 
and via 


After bei ng advised of the 
provided the following 


(U/ /FO ttef 


had contact with PRN client CLINTON EX ECUTIVE SERVICES 
of contact at CESC were CHERYL MILLS, 


for PRN, and in that role, 
CO RPORATION fCF.Sq i- His points 
and 


(U//FOtfO)| 

HILLARY CLINTON that was sht 


what became of the foregoing laptop. 


was not aware of a laptop containin g an archive of y nail belonging to 
pped to PRN around February 201 4 ^ 


was not aware 


(U//F©tf© 
Clinton Executive 


fvas not aware of a CLINTON email archive being tran smitted to the 
Services Corporation (CESC) around July 2014 and September 2014 by | 


(u//F©wef 


October 2014 to January 2015.[ 
shred their email records. 


Iwas not awa re of any support PRN provided the CESC client from 
was not aware of any CESC request to delete, wipe or 


(U/ /FQUQ) At this point in the inter view. Agents displayed PRN provided records and email from 

provided the following information: 


the March 2015 timeframe 


(U//FOUO) In March 2015, w hen various medi a outlets reported a private email domain and 
server used by HILLARY CLINTON [ e ntertained the idp of hiring a t ftird party comp any 

srj |rei 


to conduct penetration t esting of the CESC emaj l serve] 
from a company named 


recommende' 


but the testing ultimately did not occur. 
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(U//FOy©) In March 2015, | recalled PRN employee 

to the Equinix data center, but did not know the purpose of the trip. 


ravelled 


(U/ /FOUQ) After Agents d isplayed an emai dated March 09, 2015 where CHERYL MILLS 

discussed preservation of materials! could not recall any other request by any entity to 

preserve CESC related data| recalled receiving some guidance by PRN attorneys to 

preserve data, but could not recall specifical y. 


(U/ /FOU O)| 

March 31. 2015 with CHS 
PRN’s attorney. | 
shredded. 


Kad no rec ollection of a specific conference call on March 25, 2015 or 
| did recall conference calls with CESC that were run by 
(stated CESC never requested their email content by deleted, wiped or 


was unaware of any successful computer intrusion of the CESC 


server. 


(U//F0HO) Notes of the interview and documents displayed tc 
in a FD340 envelope and filed with the captioned investigation. 


will be maintained 
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(U//F0W0) On F ebruary 4, 2016 
J'lY, mobile phone 


J, home addrestj | 

was interviewed at the law offices of Bryan Cave LLP. 1 155 F 


Street NW Washi ngton. DC 20004 bv Fed eral Bureau of Investigation (F BI) Special Agen t ( SAh 
land SA| | Department of Justice attorne> f~ | and | 


3 


counsel, 

the interviewing agents and the nature of the interview,! 


Jwere also present for th e interview . After being advised of the identity of 


provided the following: 


(CLINTO N) in 1997 when he was assigned[ 


first met Pre sident WILLIA M CLINTON and HI LLARY CLINTON 


o The White House as 


At that time. 


received a securit y cleara nce after a single scope background investigation was conducted. He 

ko include traveling with the President , until 2001 when Presi dent 


served in The White Hous-ej 
CLINTON left o f fire On I 


President CLINTON’S^ 


| told| Ithe C LINTONs had been kee ping an eve on him and would like him to join 

acce pted the off er and or j | , drove to their Chappaqua, 

irst.six months]^ J..PQ.?i.ti.aiiw3s.c.gvfirs.d..a^.. patt.Qjf.ihe miUtatY-assistance.. 


their New York family. 

NY residence. For the. 

.nr.nvi.ded.la.e\'£r.v.nLeaiden.t.VYk)..kav.e.sciffic£.f 


he primarily focused on 


but ended up with many more responsibilities. 


He then returned to Chappaqua where 


recalled an Apple server in the basement of the CLINTON’S Chappaqua 


.(u//peue) 

residence, hut do es not remember when it was installed or by whom. It was a big box to the right of 


does 

Jwith no exte rnal devices attached, ho wever, it had an internal capability to backup data. 

' ] HILLARY CLINTON, JU STIN COO PF.R, AND 


HiiMA ABEDIN, 


% 


ad email accounts under the owjc domain housed on the server. 


server as a workstation. 


also used the 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U/ /FOU O)| did not know of plans to install the server constructed by BRYAN 

PACiI.IANO at the time it occurred. The server consisted of three thin black boxes mounted in a rack. 

described himself as not technical and, therefore, could not speak to any details regarding this 


server. 


b6 

b7C 


Investigation on 02/04/2016 ai , 
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Washington, DC 


File# 
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Conlinualion of FD-302 of 

(U// FOUO) did not recall escorting anyone from Platte River Networks in June 2013 

into the Chappaqua residence to remove the server described above. 

(U/ /FOUO) HILLARY CLINTON’S office was on the third floor of the Chappaqua residence. 
After she became the Secretary of State, the State Department (State) converted it into a sensitive 
enmnarfme nted information facility (SCIF). During the installation of the secure lines for the SCIF, 
ktood at the door as an escort for the technicians. After that conversion, CLINTON was the 


only one who had the combination to access the office until it was decommissioned one to . two weeks 
after her departure from State. It contained approximately three phones installed by State. 


believed all t hree to be s ecure phones and described them as a black STU phone, a yellow phone, and a 
white phone. jdid not know the differences in the phones. The office al $o containe d 


CLINTON’S non-secure desktop computer, a shredder, and a secure fax machine. 


initially 


stated he only entered the SCIF once or twice, when CLINTON was present, to remove trash. 


Jlater recalled a procedure established by ABEDIN witn 


beginning 
fax. Whe 


at the 



DN’s tenure at State for situations when CLINTON needed assistance with the secure 
was notified by State personnel of an incoming secure fax, he would locate 


CLINTON, follow her to the SCIF, and assist as needed with the incoming fax. He was never in the SCIF 
to receive a fax without CLINTON present arid never physically picked up any of the documents 
received. If the fax was not working, State would sometimes send a courier wi th documents or a 
diplomatic pouch to the Chappaqua residence. On those occasions ] [ would escort the courier 

from the g ate to the door and the courier would hand the documents or pouch directly to CLINTON, 
would also coordinate the repair of the fax when broken. 


(U// PQUO) ABEDIN or CHERYL MILLS would sometimes notify 


the Presidential 


Daily Brief (PDB) woul d be coming via secure fax to the residence. As described above with other 
secure faxes 


Jwould locate CLINTON a nd assist w ith the incoming secure fax. The PDB was 


also hand carried to the residence on occasion an 




would escort the courier to CLINTON. 



(U//FOt*e-) 


perio dically received emails from ABEDIN with attached documents 
Jwould print the documents and give them to CLINTON, but does not 


intended for CLIN 

know what happened to the documents after CLINTON was finished with them. 
Unknown handled similar duties at CLINTON’S residence in Washington, DC. 


Last Name 


(U/ /FQU O- ) CLINTON had sev eral BlackB errv devices over the course of time. When 


CLINTON had issues with one of them, 


5 


would ask COOPER for advice on how to fix it. 


believed CLINTON had a State BlackBerry, but did not recall a secure mobile phone. 


(U//frOHe) 

(U/ /FOUO) 


did not recall setting up an Apple ID or iPad for CLINTON, 
(did not recall a secure phone in CLINTON’S bedroom. 
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Date of transcription 03/23/2016 


Chief Exe 
olovme nt. 


ir is 


and his email address is | was advised that 

the FBI had identified 37 login attempts to the A PPLE I CLO UD account 
of hdr22@clintonemail . com , originating from three -owned IP 

addresses . | | was provided with the IP addresses that made the 

login attempts. After being advised of the identitie s of the 
interviewing Agents and the nature of the interview, provided 

the following information: 


headquartei 
locatio ns . 
provide 1 


la s approxima tely | j employees at their main 


other 

They 


has a large customer base 


including m^ 
components . 


provided the Agents with a demonstration of th« 

1 on a laptop in his office. 


others . That data is then 





| provides their clients with two basic services: 1) their 

security platform can be used to link and search f or current social b6 
media information on the Internet; and 2) | ~ | can provide on-going b7c 

social media monitoring for their c lients . | explained that the b7E 

I utilizes their continuous 


investigation on 03/23/2016 


■CYBER 


Date dictated N/A 
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monitoring service to generate ale rts for new so cial medi a posts 


] Additionally, 


provides that 


relating to current _ 
same service for all United States Department of Commerce employees, 
whether they are aware of it or not. 


b6 

b7C 

b7E 


Along with searching for 


b4 

b6 

b7C 


confirmed that two of the three IP addresses shown to him 
stated that the third IP address may have 
he oast, but that it was no longer active. 

I is assigned to 


belong to 
bee q assigned to them in 
The 


does not maintain historical logs for searches that are 


then showed the Agents a screen on his laptop, where the username 
field was displayed without a corresponding password field. 


To the best of 


to being 
platform . 



recollectior 

. 1 

anyone on 

her behalf. 



[ vas not hired by 


attributed the login 



ed by one of their clients, utilizing, the 
then left the interview for a brief moment in 

order to verify that | was not conducting any contin uous 

monitoring services for HILL ARY CLIN TON. When he returned, 

confirmed that they are not. stated that he had a co-worker of 

his search for CLINTON'S nam e within their Pl atform. In order to 
protect the FBI's inquiry at I had the co-worker search 


for CLINTON'S name in the system, along with the names of two 
additional current Presidential candidates. The results were . negative 
on all three searches. 


b4 

b6 

b7C 
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was then informed that the hdr22@clintonemail . com email 
account was published in a NEW YORK TIMES article on March 02, 2015, 


and that the 


login attempts occurred on the following day. 

^tated that this made sense to him . Given that information, he 

theorized that the login attempts were likely made by one of their 
"good guy" clients, possibly to conduct a damage assessment on the 


social 

media rootpnnt associated witn tnat email aaaz 
stated that he could not verify his theory, as 

ess, hoj 

additional data to corroborate it. 


had no 


is amenable to future contact with the FBI. 
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b6 
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( , Chief Executive Offic er (CEO) , 

interviewed at his place o f employment, 


1 telephone number is 


ana 


| Also present for 
Las advised 


his email address is 

this interview was FBI SA | . . 

1 -hat the nature o f the interview was to determine whether or not 

1 had performed any penetration testing on the 
clintonemail.com domain. After being advised of the ident ity of the 

interviewing Agents and the nature of the interview, | | provided the 

following information: 


I I di d not perform any penetration testing for the 

clintonemail . com domain. □ recalled that the clintonemail . com domain 
was previously hosted at the PLATTE R IVER NETWORKS (PRN) Internet 
service. provider in Denver, Colorado. | |is good friends with| 

who is 

cf 


at PRN. | | recalled speaking with f | about ao'ing 

penetration testing on that domain, approxi matel y six months prior the 
large media coverage of the private server. | [ provided security 
recommendations for the system; however, actual penetration testing 
did not ultimately occur. 


PRN. 


, maintains a working business relationship with 
If a PRN customer wishes to have penetration t esting performed o n 


their network, P ip will then refer that customer to 


Correspondingly, 


] will refer their customers 


, I I 

if wish to harden their network sy stems subsequent t o a 

- [ lalsi 


penetration testing assessment. 




leverages technical resources at PRN for other projects, including 
incident handling and forensic analysis. The two companies compensate 
one another with commission checks. 


Investigation on 04/12/2016 at| 

File# J cybf:r ~ L 


} 


olorado 
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emails with PRN emp loyees regar ding 
primarily dealt with but 


|recalled sharing se 

the clintonemail . com domain. 

remembered tha t the re were a couple of other PRN employees included on 
the exchanges - 1 ~| th en went to h is office and printed out several 
email between him andl I Those printouts are enclosed for the 


file in a physical 1A envelope. 

never had access to the clintonemail.com domain, 


nor do th pv hnsf . any of their company services on PRN networks. The 

interactions with PRN employees, related penetration 


extent of 
testing, and t 
exchanges that 


tie clintonemail.com domain are documented in the email 


provided during this interview. 


.While reviewing the emails provided by[ 

.ane— which references 


SA 


identified 


where an individual named 


identify the 

email, server. 


a public news article, 

| had utilized a scanning tool called FIERCE to 
ddresses used for HILLARY CLINTO N' s ( CLINTON' s ) person al 


aaare sses useg ror hil 

. I kr.oyi.4ed_ that „t he | referenced 

provided that 


| formerly 

managed an Internet blog where he posted new h acks and exploits on 


iat I 


almost a daily basis. A few years ago, however,] 

discontinued publishing his finding? on the Internet f 


that 


community. 


goes by the name of 


t 


within the 


went dark and 
provided 
hacking 





Recalled 


meeting 


TT 


at a Colorado technical event, 

J referred to the event as a leads 


which 

event, which was a technical expo in Colorado where information 
technology experts coul d exchange ideas and r jetwork with one another. 


During that event, 

SECRET SERVICE Agent, 

j o r to the event, 


spok e on a panel with 
named 


I 


and a US 


|. During introdu ctions with one 
R ecalled USSS SA | s tatin g to 

that he had recently served a warrant at PRN. | ~| surmised 


that statement to relate to the on-going invest igat ior } of C 
email server. Agent Note: A follow-up call to USSS SA 


, INTON' s 
identified 
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warrant referenced in that conversation was served in support of 
different matter. 


situ; 

— \ 

r i pms 


it ion. 



as a "good guy' 
has stated his frustrations td 


CLINTON email investigation. 


who is c aught in a bad 

regarding the 


stated that it has had a 


direct impact on PRN's business, and that they have spent a large 
amount of m oney in legal fees related to the matter. Primarily, 

J is concerned over the negative publicity that PRN has 


received in the news media. Additionally, PRN has been asked to step 
out of certain requests for proposals (RFP' s) as a result of the 
investigation . 


In add 
with PRN'_sJ 

.ition to 1 


”|has also had limited interactions 

| Last Name Unknown (LNU) . 

However, 


has been 


primary point of contact at PRN. 



s amenable to future contact with the FBI. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 



FD-3Q2a (Rev. 10-6-95) 


ALL IMrOPi'AT IOH CONTAINED 

HE PE IN IS UNC LAS3IFIEC 

CATE 10-05-2015 BY J37285T94 ITS ICC 


- 1 - 

FEDERAL BUREAU INVESTIGATION 


Date of transcription 1 1/24/2015 


int erviewed bv Fedora" 


(SA)| 

DAY 


date of birth (DOB) 

Bnrpan nf T nvoct- i na i- 17-Tn 
and 


was 


PITNEY located at One Canterbury Green, Stamford 
present for the in terview were DAY PITNEY attorneys 


(FBI) Special Agents 
at the law offices of 
OT 069m Al^so 

and 


After being advised of the identit y of 
interviewing Agents, and the nature of the interview, 
the following information: 

is currently employed as 


the 


provided 


at 


Prtiiu ioedtea at 

position fori 

iui Merrier /, worwair. u udodj,, 
1- Prior to that. 

ana 

[was 

riPin r 


and worked partly as 

the 



b6 

b7C 


b6 

b7C 


DATTO is a company that provides products and services to small 
businesses related to cloud storage and disaster recovery. DATTO had 
an established relationship with PLATTE RIVER NETWORKS ( PRN) and 
provided them server back-up and recovery services for some time. 
DATTO' s relationship with PRN was already established in 2013 when PRN 
acquired a new contract to manage an email server with a client known 
to DATTO as CESC. At the time, DATTO did not know who PRN's client 
CESC was. 


When PRN reached out to DATTO in. May 2013 to provide back-up 
services for the CESC client server, PRN requested a slightly 
different service from DATTO than they normally request. Typically, 

PRN would request that DATTO back-up remotely to DATTO' s secure cloud. 
For the CESC client server, PRN requested that the server be backed-up 


Investigation on i 1/19/2015 at Stamford. CT 


File f> 

ML 

-V\ 
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locally and privately. At the time of this request, it was not only a 
new request for PRN, but a non-standard process for DATTO. In order to 
affect the private, local . storage needs for PRN' s CESC client, PRN 
ordered a SIRIS 2000 device from DATTO, but forgot, or did not know, 
to also order the private node that the data would be routed to and 
stored on. Because of this, the default on the DATTO configured SIRIS 
2000 sent the CESC server back-up data remotely to DATTO' s secure 
cloud and not to a local private node. This default configuration on 
the SIRIS 2000 has since been changed. 



n3cT 


delete local. I 

i i i i * 


stated that PRN must have known data was being logged in 
e cloud and not on a local private node. As evidence, 
stated the partner portal, that PRN had log-in credentials to, 
feature display ing backed-up data and options to delete cloud or 

state d PRN wou ld have seen their back-ups under 


delete cloud. Additionally, 


was shown a document provided by 


DATTO indicating email records were manually deleted from the hatto 
secure cloud back-ups of the PRN CESC server in March 2015. I 


stated that it couldn't have been a DATTO employee that deleted those 
email records, because there would have been a work ticket indicating 


as much. C oncerning the IP addresses as sociated with the March 2C15 

was the DATTO relay server 


deletions, 


thought 


I I i-r 

handling the connection and [ 


was a local host connection. 


stated PRN had log-in credentials on the partner portal that 
tied to one employee, so he did not know who from PRN logged 


weren - t 
in at any given time. 


Data is sent to the DATTO cloud through Secure File Transfer 
Protocol (SFTP) from the local DATTO device purchased by the client. 
Multiple DATTO devices, for different, clients, are synced to one node 
for unified data storage. Each DATTO device is segmented on that node 
and only writes to a directory paired' with the corresponding device. 
The data on the servers is partially encrypted and a password would be 
needed to access remotely. 

The DATTO server farm is housed in Pennsylvania, multiple levels 
underground, in a secure facility. In order to access the facility, 
you must be a client there and process through security, which 
includes a biometrics scan. The cages that house the servers are also 
locked. 
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DATTO virtualizes systems locally on the DATTO appliance or 
remotely in the DATTO secure cloud. As part of this process, an 
automatic test is conducted to verify the virtualization where 
screenshots of the windows login screen are sent to DATTO clients. 

Many of DATTO' s clients, to include PRN, would occasionally get 
"backup ve rif icat ion failure" notices showing their DATTO device was 
unbootable. | | indicated this notice occurred very frequently and 

almost always was an issue involving the virtual environment and not 
DATTO actually failing to maintain back-ups of the associated servers. 
This issue was usually resolved with a handful of solutions to include 
changing drivers and controllers or lengthening windows for 
verification. 


DATTO never altered or configured the retention settings 
regarding the period of time or frequency that the PRN server was 
backed up. The retention settings are set by the client. 


On 08/13/2015, after the CESC client was known to DATTO and 
lawyers became involved regarding the retention, preservation and 
production of records regarding the CESC client, DATTO shipped a new 
SIRIS 2000 device to PRN. The impetus to the shipment was the 
realization that the SIRIS device originally purchased by PRN was not 
encrypted. The provision of the new ST RTS ,-^ vi r- P wa ^ initiated by.' 
DATTO and brokered by their attorney, ! [ DATTO provided the 

device to have increased security while also ensuring continuity of 
operation on the server. 


stated the DATTO secure cloud is frequently scanned and 
he has n o knowled ge of any intrusion or deep penetration of their 
systems. stated the best place to look for network intrusion 

is the system logs. 


never discussed federal records retention or classified 
information with any representative of PRN or CESC. 
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Dye of transcription .Jh/AulMl 


the interview. 


Approximately 6 weeks ago, 


received an email from 


of the .Deprt rfmpnt of State (STATS) Freedom of Information Act 

(FOX A 5 section. | email enclosed copies of 5 email communications 

from former Secretary of State HILLARY CLINTON ' s private email account 
which STATS believed may contain "FBI equities." STATS requested the 
FBI conduct an appropriate classification rev 1 ew of the emails prior 


advi sed thes e 


emails 


to their scheduled FOIA public release. 

were transmit vai — aq him on a classified email system but were marked 


unclassified. 


recognized that at least 1 of the emails appeared 


Appr oximate 1 y 1 week later, STATE'S Office of Legal Counsel (OLC) 


con fra 


■ ted 


-fj-y 
J ar 


d questioned the FBI's SECRET/ /KOFORK deter mi n ation . 


could not recall the name of the caller. According to OLC, 
does not have an official government and therefore it believed the FBI 
could not classify a document based on the FG1 caveat. OLC also 
advised that they, not the F3I, are the judge of potential harm to 
foreign governments and therefore the FBI did r-ot have the right; ho 
classify a document based on those conditions , I 


b6 


Records Management Division, b 7 c 


Records Information and Dissemination Section, Winchester, Virginia 
was interviewed at FBI Headquarters, Washington, D, C. After being 
advised of the , Ident ities of the interviewing Agents and the nature of 

provided the following information.-. 


teler 


resides at 



shon-a 

r 

-ha. 

s been employed in the Records 
years . 

Management 

Division for the past 

□ 


b6 
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for 

> -L I* 

class if i 

MSA :..W tni- 

cation review . These email 

s were reviewed bv 1 


-aotiL 

1 Qt CTP, I 






relayed these findings to 

STATE a® per protocol. 
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as .such remained classified at. the SECRET/ /3S0F0RH level, [ 


r rrmrv 


inWfttigstiun on 07/30/20! 3 at Was hington. O.C. 
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believed, based on 


an Original. Classification 


Authority 

accuratelv. 


(OCA) , 


the email was classified properly 


_a 


m ortlv 


thereafter 


?. 


wao 


received a call from 
of the International Operations Division 
'''oressnred" .him to chancre the classified email 


( iqd ) of the FBI 
to unclassified. 

KENNEDY, 

altering the email's classification in exchange for a "quid pro quo 


indicated ha had been contacted by PATRICK 
Undersecretary of State, who had asked his assistance in 


advised that, in exchange for marking the email unclassified, 
STATE would reciprocate by allowing the FBI to place more Agents in 
countries where they axe presently forbidden. 


Following the above exchange, 
agency" meeting at STATS to discuss 


of pending C 
STATE , along 


was summoned to 
matters pertai ning 
INTON FOXA materials. 


an 

LG. 


"all 

the 


class! fi ca t i or. rev i ew 

official from STATE, along with representatives from CIA, DIA 
and other government agencies were present. PATRICK KENNEDY presided 
over the meeting. During the conversation, a participant specifically 
asked whether any of th e emails in question were classified, l eaking 

eye contact with | 

believed this was 
SECRET/ /NO PORN emai 1 


KENNEDY remarked, "Well, we'll see." 
referer.ce to the FBI-'s categorization of the 
which KENNEDY was attempting- to influence. In a 
priva te meet ing with KENNEDY following the all agency meeting, KENNEDY 

asked whether the FBI could "see their way to marking the email 

unclassified?" According to 

debating the classification of 
the FBI to change its markings . 


Since _ 

the email was appropriately marked SECRET/ /NOFOKN , kenn 
else in the FBI he could speak with on the matter. 


KENNEDY spent the next 15 minutes 
the em ai 1 an,d attempting to influence 
continued to assert that 
DY a sked who 
referred 


KENNEDY to MICHAEL STEINS ACM , Assistant Director of CTD 


b6 

b7C 


b6 

b7C 


b6 

hlC 


was then present during a conference call involving KENNEDY 

and STEINBACH in which KENNEDY continued to pressure the FBI to change 
the classified markings on the email to unclassified . STEINBACH 
refused to do so. Prior to ending the conversation, KENNEDY asked 
whether the FBI or STATE would conduct the public statements on the 
matter. STEINBACH advised KENNEDY that the FBI would not comment 
public ly on the matter. The conference call ended and, according to 
l the Associated Press {A?} published the story within the hour. 
Former Secretary of State CLINTON appeared in front of the press 
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b7C 








FD'.iOZa (Riiv. ! 0-6-95) 


Cotuinuasicn of { : j,V3t)2 of 


imci v iew o([ 


. »n 07/ji» /20i5. Page 


shortly t her a after to deny having sent classified emails on her 
private email server. 


believes STATE has an agenda which involves minimizing the 
classified nature of the CLINTON emails in order to pro tect STA TE 


interests and those of CLINTON. Since the above incidents, 
received approximately 3 or 9 more emails from STATE involving 
equities, l of which he believes may be classified SECRET/ /NOFQRN. 


FBI 
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retirement on 


^Federal Bureau of Investigation 0iEl£ 


Interna tional Operations Division (IOD). who is current 


Supervisory Special Agent (SSA)[ 


interview 


was in terviewed in per son bv FBI Spe cial A; 

located 


n«c 


rrentlM 

gents! 


Agerr 

tedat[ 


land 


After being advised of the Identity of the interviewing Agents and the nature of the 
provided the following information: 


interacted with PAT RICK F. KENN EDY, U.S. 

Department of State (DoS) Under Secretary of State for Management. and KENNEDY’S 

relationship was professional The two got along, but did not agree on many matters related to the FBI ’$ 
role and authority overseas. 


found a note on his desk indicating 
tsed, as both his Assistant Director (AD) J 


(U// F0U 6) hi hie May or earlv Jur^ e. 

KENNEDY contacted him. [ was surprised, as both his Assistant Director (.AD) JOHN 

BOLES and Executive Assistant Director (EAD) ROBERT ANDERSON, had both been trying to contact 
KENNEDY for months without response. 


(U/mm) When) 
assista nce in changing a c 


provide] i 

FBI’s Records Management Division (RMD)| 
document was classified. 


(returned KENNEDY’S call, KENNEDY asked 

ossification of FBI informatio n contained in a n e -mail. KENNEDY did rnv 

with the e-mail, howe ver, he told| I that 


Jwas the one that told KENNEDY the 


of 


(U//FOH6) KENNEDY tolcf 


Jthat the FBI’s classification of the e-mail in quest ion 


caused problems for KENNEDY and KENNEDY wanted to classify the document as W B9.” KENNEDY 
further stated that the “B9” classification wo uld allow him to archive the document in the basement of 
DoS never to be seen again. was not sure of what KENNEDY meant by a “B9” 

classification [Note; .89 may be a reference to a FOIA exemption]. 


(U/ /FOUO ) Not yet knowing the e-mail’s content, 


Jtokl KENNEDY he would look 

into the e-mail matter if KENNEDY would provide authority concerning the FBI’s request to increase its 
personnel in Iraq. 


Investigation oh 09/03/201:3 Washington. DC 


[•302 - 2 . Date- dkiaard N/A.. 


Bv SSA: 




j 

SA 
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six! its contents are not to be distributed outside your agency. 
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Interview < 
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(U// TOUO) Foil owin g his corwe rsa tiem with K£NN EDY. | 


old 


contacted 

]the e-mail. of KENNEDY ' 5 concern was 


to 


discuss the e-mai l of concern 

classified by the FBI Counterterrorism Division (CTD) and was related to the attac ks on the U.S. 
Consulate in Benghazi. Following his conversation with | C ontacted KENNEDY 

and informed him that there was no way he could assist KENNEDY with declassifying the Information 
contained in the e-mail. 


m 

declassify the e-mail and|_ 


did not discuss the content of the e-mail with them. 


lto Id AN DERSON and BOLES -about KENNEDY'S re quest to 
^response denying the ability to do so, however. 
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NS ICC 


Dale of transcription 1/19/2016 


un L'cccmuei iu,zuuj l yjwner ana t_r 

was interviewed bv Federal Bureau of Investigation fFBB Specia 

iiei lecnnoi lev urncer 
Aeent ISA' 

End SA Also present for the interview was 

attorney] 


the interview,! 


irovided the following: 



helped produce the n, 
architecture. 


oposal and PAGLIANO assisted in developing the requirements for the server 
started the discussion by providing a range of options from low-cost Gmail to a 
more sophisticated private server. She understood the client’s impetus for the project to be 
reliability/uptime and security in the wake of a situation where the client’s private server housed in their 
residence experienced one w eek of dow ntime because of a storm. The client selected the private server 


from the options provided by 


was not involved in those decisions. 


Backup systems were planned for Phase 2 of the project, but 


(U/./FOUO) As part of the initial conversations with PAGLIANO and MTLI.S 
one point th e domains and number of email accounts on the server, but could not reca 


y 


new at 


those details. 


Additionally 

equipment maintained by PAGLIANO. 


Ihad no knowledge of email servers owned or operated by the client prior to the 


(U/ /FOUO ) After the client selected a private served 


contacted two firms she had prior 

experience with: GRAVITAS, a large Information Technolo gy firm, and PLATTE RIVER NETWORKS 

After the client selected PRN] 


(P RjNL a small boutique fi 
and 


or two meetings; 


worked w ith MILLS, PAGLIANO, 

Jto develop the details of the project!) was only involved in one 

elieved he was curious about the process. PAGLIANO handled the technical 

aspects of the project and MILLS handled strategic concerns. As PRN took over day-to-day man agement 


nvolvement gradually faded out. The client occasionally reached out for assistance anc 
would help where she could. Payment for her services was billed for the entire task, not hourly, so she 
did not charge any fee for this assistance. 
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Continuation of FD-302 of 


Interview 


4 . 


. On 12/16/2015 . Page 


(U/ /FOUO) 


[believed a Cloud Jacket-type security device was part of the project design, so 

when it wasn’t part of the initial install, she pushed for the implementation of it after the migration from 
the PAGLIANO server to the PRN server. During the migration she was not in the weeds, but knew 
enough to know it was done correctly from a security standpoint. ! 1 was not aware of any security 

intrusions or compromises while she was involved in the day-to-day operations of the transition, nor was 
she brought back in aft er the fac t on any security issues. In addition to the CloudJacket. as part of the 
security considerations, ! | discussed transitioning from BlackBerries to the iPhone with the client, as 

well as blocking international access to the server. Ultimately, the client chose to stay with BlackBerries 
and international blocking was declined because the client frequently traveled internationally. 


public j 


fUZ/ TOUQ ) Since press reports of[ 


association with PRN and the CLINTON’S went 


land some partners contracte d Depth S ecurity to conduct Vulnerability T hreat 


Assessments for some of their shared clients, 
on the CLINTON’S server. 


was not aware of any such assessment conducted 


(U//FeU6)| 
PRN servers: 


had no knowledge of the following topics as they relate to the PAGLIANO or 


• moving emails to a new domain 

• laptop backups 

• temporary backups 

• classified information 

• federal records 
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(U/ /TQUO) On May 23, 2016,[ 


date of birth 


by Federal Bureau of Investigation (FBI) Special Agents (SA 

at the offices of Platte River Networks (P RN) located at 570 0 Washington Street, Denver. Colorado 


802 1 6. Also presen t for the interview w a: 
both attorneys at the 


the nature of the interview 






jandS/J 


was interviewed 


and via speaker phone, 


After being advised of the identity of the interviewing agents and 


provided the following information: 


[ u//i'uuu| 1 was given fkin aammistrator creaentiais to me ui 

Corooration (CESC) email bliLpould not recall logging in to the server. 

imon tsxecunve service 

^understood! 1 

jwere in charge of handling the CESC c 

lient 

recalled he 


assisted with the CESC client le ss than fi ve times. He reca led he once assisted someone from CESC in 

talked to | Last Name Unknown (LNU) from CESC most 


updating their operating system, 
times. 
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(U//FOU©) 


|was not aware of a laptop containing an an 

HILLARY CLINTON that was shipped to PRN around February 2014. 
became of the foregoing laptop. 



ail belonging to 
as not aware what 


(U//FOUe _ 
2014 to January 201 


records. 




Iwa s not aware of any support PRN provided the CESC client from October 
was not aware of any CESC request to delete, wipe or shred their email 


was not aware of any email content being transmitted to CESC. 


(U/ /FOUO) At this point in th e interview, Agents displayed PRN provided records and email from 

provided the following information: 


the March 2015 timeframe. 


(U/ /FOUO ) | ~] was not aware of a trip made by PRN employee| 


ko the 


Equinix data center in Secuacus, New Jersey. 
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(U//FOUO) After Agents di splayed an email dated March 09, 2015 where CHERYL MILLS 


discussed preservation of materials 
to preserve CESC related data. 


had no knowledge of the email or any request by any entity 
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Continuation of FD-302 of 

(u//F©g©r 


In' 


of 


1 


On 07/23/2015. Page 


has no recollection of a conference call on March 25, 2015 or March 31, 2015 


with CESC. stated CESC never requested their email content by deleted, wiped or shredded, 


(U/ /F Q UG) 


Iwas unaware of any PRN employee conducting manual deletions of the 


DATTO device used to back-up the CESC email server. 
(U//FQee ] 


jwas unaware of any successful computer intrusion of the CESC server. 

Iwill be maintained in a 


(U// FQUQ) Notes of the interview and documents displayed to 
FD340 envelope and filed with the captioned investigation. 
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Date of transcription 6/29/2016 


(1 i/ z f'f- frT 10 3 On .1 imp 29, 2016 Assistant to President William J. Clinton ] 

1 was interviewed telephonic allv by Federal Bureau of investigation (FBI) 
Sperial Age nts! I Representing I and also present for 

the call, was ! | frorrTThe Department of Justice 

(DoJ) Counterintelligence and Export Control Section also participated i n the call. A fter being advised of 

the identities of the interviewing agents, and the purpose of the interview, provided the 

following information: 


ever use Tor.l 


/as not f amiliar with Tor, which enables anonymous communication, nor 
| described herself as a “very low tech person.” 


(U//F OU 6) used various communication devices and computer to remotely sign into 

her @presidentclint on.com emai l account. These devices included an iPhone, BlackBerry, and on rare 
occasions, a laptop. ! ^ Iso accessed her @presidentclinton.com email account from her desktop 

computer at the Clinton Foundation .! b desktop computer operated off of Windows, but she 

was not sure of the specific version- ! [ further stated that she used an Apple Mac on occasion to 

sign onto her email. 

(U// FOUO lid not recall experiencing any unusua spam or ph ishing email activity 

related to her @presi dentclinton.com email account in January, 2013. was in New York on 

January 5, 2013. 


A copy of the original interview notes are attached in a 1 A envelope. 
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On September 14. 201 5 ] 
social secu rity r 
Agent (SA)| 


Platte River Networks, date of birthl 


iceri 

[was ini 
land SAl 

erviewea ov federal Bureau ot Investigation (f Bit Spc 
Also present for the interview was 

|ifom| 


|and Department of Justice (DOJ) Attorney! | 


provided the following: 

In February or M arch 2013, [ vas informed by 


at Platte River Networks (P IN), of a potential contract managing email for a high 
profile client, but did not know who the client was. | was not involved in the proposal or technical 

so l ution for the dienl . nor did he have, any, first hand meciinp.s wilfr anyone representing t he client 


and 


¥ 


landled those matters 




eventually learned the client was WILLIAM CLINTON and HILLARY CLINTON (CLINTON), doing 
business through a company named CESC. At some point during the process, CESC conducted 
background chec ks on the individuals. who vy ould provide the technical supp ort for the contract. Those 

and did not know why CESC 


individuals were 


conducted the background checks, but assumed it was because they were a high profile client. 
On or about March 201 5,1 


Jfirst learned about concerns regarding CLINTON’S use of a 


private email server when it was reported by the media. Due to this increased attention, PRN decided to 
place Internet Protocol ( I P) c ountry blocks and took other additional steps to secure the CESC server. In 


the same timeframe. 
Connolly, to 

and 


[participated in a conference call with 
’s email was stored. While! 



j*s counsel, Williams and 
as on the call. 


handled most of the questions. Subsequently, PRN received a preservation 

letter from the United States Senate and a preservation request from the FBI. PRN brought their own 
counsel on board to assist with these requests. 


After receiving the FBI’s preservation request, PRN received a letter from Williams and Connolly 
instructing them to give .the FBI the CESC server used prior to migrating email to PR N acquirer 


equipment. 


i traveled to New Jersey and turned over the server to the FBI. 

did not power up the server before providing it to the FBI. 


^tated 


The CESC email server architecture also involved a DATTO backup appliance. The DATTO was 
configured to store backup data locally, however, due to a glitch, DATTO backed up data to their cloud 
for a period of time. On or about August 24, 2015, DATTO sent PRN a letter stating they would stop 
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backing up to their cloud and preserve what was in their possession. The DATTO has a 60 day purge 
cycle, therefore, DATTO should have data from 60 days prior to August 24, 2015. 


[ ftated] 

email server project, | never 

classified information on the server. 


|and| |would have specific details regarding the CESC 

heard anyone related to the CESC project discuss the existence of 
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(U//F OUO) On May 23, 2016, 


£ 


date 


birthf 




was interviewed 


by Federal Bureau of Investigation (Ffll) Special Agents (SA)j_ 

at the offices of Platte River Networks (P RN) located at 570 0 Washington Street, Denver. Colorado 
8021 6. Also prese nt for the interview w as j and via speaker phone, ["" 


both attorneys at the 
the nature of the interview^ 


After being advised of the identity of the interviewing agents and 

Jprovided the following information: 


(U//FOU0) was not aware of a laptop containing an ar chive of e mail belonging to 


F11LLARY CLINTON that was shipped to PRN around February 2014. 
became of the foregoing laptop. 


was not aware what 


(U//F€)ij€F) | | only recently was made aware of a CLINTON email archive file being 

tr ansmitted to the Clinton Executiv e Services Corporation (CESC) around July 2014 and Sentemher 201- 


* - 

as it was occum nd 


% 


as not aware of the request by CESC, or transmittal b; 


fulfilled the request 


was pot aware o f what specifically was requested by CESC or exactly how 
never spoke with anyone at CESC. 


(U//FOUO)! 
2014 to January 2015jj 


| wa s not aware of any support PRN provided the CESC client from October 
I was not aware of any CESC request to delete, wipe or shred their email 


records. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U/ /FOUO) At this point in th e interview, Agents displayed PRN provided records and email from 


the March 2015 timeframe 


xnnt m tn e interview, Agents displayed i'KJN 
. provided the following information: 


(U//FOUO) In March 2015, when various media outlets reported a private email domain and 
server was used by HILLARY CLINTON, PRN decided to create an internal “share drive” and control 
access to only the PRN employees working the CESC account. PRN never deleted information pertaining 
to the CESC client and provided the FBI all records they maintained pertaining to CESC. 


(U//FOUO) In March 2015 ] stated PRN employee 


[ travelled to the 

Equinix data center to check the security of the servers and to ensure they were “locked tight.” After the 
media reports, PRN was even more concerned about the security of the server. 


b6 

b7C 


b6 

b7C 


Investigation on 05/23/201 6 at Denver. Colorado 



b3 

b7E 


This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency. 


b6 

b7C 


FD*302a(Rev, 10-6-95) 


Continuation of FD-302 of Interview oj 


, On 07/23/2015 . Page 


(U/ /FOUO ) After Agents di splayed an email dated March 09, 2015 where CHERYL MILLS 

discussed preserv ation of ma terials, could not recall any other request by any entity to preserve 

CESC related data) received guidance from PRN attorneys and understood CESC client 

information and records should not be destroyed! [believed the preservation request applied more 

to CESC records and not necessarily email content. R elieved the preservation request to be a 

request from the government. 


(U//F OL)Q) | Qad no specific recollection of a conference call on March 25, 2015 or March 

31, 2015 with CES C j stated CESC never requested their email content by deleted, wiped or 

shredded.| [had a memory of a request by CESC to confirm their server back-ups were still 

working, but could not recall the specific request. | was aware CESC wanted their email retention 

policy changed to 60 days. 


(U//F©«©) 


was unaware of any successful computer intrusion of the CESC server. 


(U//F QU 0 - ) Notes of the interview and documents displayed to 
FD340 envelope and filed with the captioned investigation. 


will be maintained in a 
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On August 17, 2015, KATHERINE M. TURNER, Partner at the law 
offices of Williams & Connolly LLP, 725 12 th Street, N.W. Washington, 
D.C. met at her place of employment with Agents of the FBI to discuss 
voluntarily turning over six (6) laptop computers in her possession 
known to contain To p Secret classified information. Also in atte ndance 


were 


of the FBI's Office of General Counsel, 



, Trial 

Attorney 

for the 

Counterespi onaqe 

Section at the 

Department of Justice. 1 



an attorney 

with Williams & 

Connelly 

LLP, and 


r 

counsel for CHERYL 

MILLS , from the 

law offices of Paul, Weiss, 

Rif kind 

■ / 

Wharton & Garrison 

LLP. 


Prior arrangements had been made to meet at this time and place 
to discuss an agreement through which Williams & Connelly would 
voluntarily turn over to the FBI six (6) laptops computers used by the 
firm to view email communications from the private server of former 
Secretary of State HILLARY CLINTON. TURNER acknowledged that these 
laptops contain Top Secret email communications and attorney/client 
privileged communications. TURNER sought to turn over the laptops as 
soon as possible but wished to ensure that privileged communications 
on the laptops would remain confidential. TURNER declined to provide 
consent to search the laptops and wished to arrange for secure storage 
of them in a manner agreeable to both the FBI and the attorneys . The 
FBI agreed to provide TURNER with a draft letter outlining the 
proposed conditions of storage as soon as possible. 


Contrary to statements made on August 6, 2015, TURNER advised 

that only five of the six laptops are in the posse ssion of Williams & 


Connelly, the sixth being in the possession of 
counsel for CHERYL MILLS, former Chief of Staff for CLINTON, 
admitted that the computer in his possession has been connected to the 
Internet on numerous occasions subsequent to being loaded with the 
classified email communications of HILLARY CLINTON. This laptop was 
possessed by CHERYL MILLS but utilized by HEATHER SAMUELSON, an 
attorney on her staff, to conduct a review of approximately 60,000 
emails origi nally con tained on CLINTON'S private email server. 


According to 


SAMUELSON deleted CLINTON'S personal emails 


Investigation on 08/17/2015 


at 


Washin 2 ton. D.C. 
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Conlinuaiion of FD-302 of 


Interview of Katherine M. Turner 


, On 08/6/2015 . Page 


from the original 60,00 0 resultin g in the 30,490 emails eventually 


turned over to the FBI . 


claimed the other emails had been 


deleted from the laptop but was unable to specify whether they had 
been forensically wiped to an unrecoverable state. 


Both 


1 p an d TURNER admitted that the emails contained on 

these laptops had been viewed by attorneys who did not have a security 
clearance at the time they reviewed the material. TURNER said the 
emails did not contain classification markers and thus they were not 
aware that they were classified at the time. 
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(U/ #0 U6) On December 10, 2015 


Office of the Legal Adviser, Financial Disclosure Div ision. U.S. Departme nt of State was intervi ewed by 

f ation (FBI) Special Agents ! l and | Also 

Trial Attorney, Public Integrity Section, U.S. Department of Justice and|_ 


Federal Bur eau of Investig ation (FBI) Special Agents 
present were 


date of birtl£ 
ent o 
Jandl 


of the 


Attorney Adviser, U.S. Department of Stat e. After be ne advised of the identities of the 
interviewing agents, and the purpose of the interview, ! provided the following information: 


(U//F0W©) In 2009 


| worked as an Ethics Analyst for the U.S. Department of State. 
She was responsible for reviewing the Financial Disclosure Forms (SF-278) of new and current 
employees to assess if their investments, or outside i ncome sourc es, created a conflict of interest with 
their position at the U.S. Department of State. When| |tad questions about the filer’s SF-278 



she would c ontact them directly, either telephonically or via email, to clarify the filer’s responses. 

Jvould then amend the SF-278 to reflect any corrections or clarifying information provided by 


the filer. She would then send a copy of the updated SF-278 to the filer for their personal records. Once 
the SF-278 was finalized an assessment was made on whether the filer’s investments, or other financia l 

interests, p osed a potential conf lict of interest. The assessment was then signed off on b) 

supervisor, ] Upon completing the review a physical file containing the SF-278 and 


supporting documents were maintained for a finite period of time before it was destroyed. 

(U//FeUO) 


was shown copies of the following documents: 


New Entra nt SF-278 su bmitted by BRYAN PAGLIANO on April 15, 2009 


Email fTorrj |to PAGLIANO dated August 25, 2009, with the subject “Ethics 

Clearance... (Reply Requested)” 

New Entrant SF-278 submitted by BRYAN PAGLIANO on April 15, 2009, with 
handwritten updates 

Incumbent SF-278 submitted by PAGLIANO on April 4, 2010 


(U/ /FOUO ) After reviewing the documents 


confirmed that she had sent the above 


referenced email to PAGLIANO to clarify some of his responses on his original SF-278.| 
provided that the email contained her original message to PAGLIANO and did not appear to have been 
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also confirmed that it was her handwriting on the updated New Entrant 
he handwrit ten notes reflected additional information provided by PAGLIANO in 
could not recall any additional info rmation abou t her exchange with 


Relieved that 


altered in any way. 

SF-278 form and that 
response to her email. 

PAGLIANO, aside from what she had written on the updated SF-278. | 

PAGLIANO had provided the updated information to her via email but she no longer had t hose emails 
because she purged her emails when she changed positions at the U.S. Department of State, 
further noted that the physical file could not be found and had likely been destroyed. 

j-eviewed the Incu mbent SF-27 8 form filed by PAGLIANO and noted that 

pointed out the checkmarks on the form and 


she did not conduct the review of that Hornment 
stated that they were not her handwriting. 


]did not know who reviewed the form but stated that 


should be able to identify the reviewer based on internal computer records. 


(U//F OU O) With respect to the Incumbent SF-278 form filed for 2009. 


stated that all 
udes any 


income and compensation from 2009 should have been captured in Schedule A. This inc 
income in th e calendar year, even if it was received prior to his start date with the U.S. Government. 

p oted that the only exception to this would be if the income was from another government 
entity. However, income from a political action committee or another campaign related organization 
would not qualify as other government employment. 


(U//FGU0-) 


noted that in 2009 the filer would h ave been pro vided with several pages of 


provided an electronic 


instructions on how to correctly and accurately complete the form, 
copy of the instructions to the interviewing agents. 

(U//F QU Q ) A copy of the above referenced documents and the original interview notes are 
attached in a 1 A envelope. 
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On September 2, 2015, | a Special Agent with 

Homeland Security Investigations (HSI) , Department of Homeland b6 

Security (DHS) , Norfolk Virginia, was interviewed at the Federal b7c 
Bureau of Investigation (FBI) . After being advised of the id entity of 
the interviewing Agent and the nature of the interview, 
provided the following information: 



was 

previously 

an 

agent with the U.S. 

Department 

of 

State, Bureau 

l of 

Diplomatic 

Security (DS) . 

_lleft 

DS 

in 

approximately 


spouse. 

was 

also 

a 


DS agent who., from 2007-2009, served as an Assistant Shift 


prior 

Leader on former Secretary of State CQND OLEEZZA RICE'S and HILLARY 
CLINTON'S protective details. | | served briefly on former 

Secretary CLINTON'S protective detail in 2009. From her 
experienc e . and information obtained through 


2009. From ner own 
and other agents, 


described a "stark difference" between RICE and CLINTON with 
regard to obedience to security and diplomatic protocols. RICE 
observed strict adherence to State Department security and diplomatic 
protocols while CLINTON frequently and "blatantly" disregarded them. 
For example, it is standard security and diplomatic protocol for the 
Secretary of State to ride in the armored limousine with the local 
U.S. ambassador when traveling in countries abroad. It is seen as 
diplomatic protocol for the Secretary of State to arrive at foreign 
diplomatic functions with the local ambassador; however, CLINTON 
refused to do so, instead choosing to be accompanied in the limousine 
by her Chief of Staff, HUMA ABEDIN. This frequently resulted in 
complaints by ambassad ors who w ere insulted and embarrassed by this 

breach of protocol. explained that CLINTON'S protocol 

breaches were well known throughout Diplomatic Security and were 
"abundant . " 
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explained that ABEDIN 

possessed 

"much 

more power" 

over 

CLINTON'S staff and schedule than 

other former 

chiefs of staff. 


believed that ABEDIN herself was 

often 

responsible 

for 


overriding security and diplomatic protocols on behalf of CLINTON. 
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On a trip to Jakar 

ta, Indones 

ia, in early 2009, CLINTON requested 


to visit an area of Jakarta that presented security and safety 
challenges. This visit was reportedly for a photo opportunity 
regarding CLINTON'S "clean cooking stoves" initiative. The DS advance 
team recommended against traveling to this area because the route 
could not be secured and was lined with dangerous circumstances and 

individuals. As such, the DS advance team recommended in writing that 

this excursion be stricken from the schedule but were told by DS 
management that it was going to happen because "she wanted it." DS 
agents felt this excursion into potentially hostile areas placed 
CLINTON, her staff, the media, and her security detail in unnecessary 
danger in order to conduct a photo opportunity for "her election 
campaign." DS agents had the perception that CLINTON was using her 

position as Secretary of State to campaign for President of the United 

States. DS agents felt CLINTON traveled with hand-picked media who 
would present her in favorable light in order to garner political 
support. It was also believed that CLINTON disregarded security and 
diplomatic protocols, occasionally without- regard for the safety of 
her staff and protection detail, in order to gain favorable press. 


CLINTON traveled in an armored vehicle whose passenger windows do 
not open. This is a design feature for the protection of the 
occupants. However, the driver's window does open slightly. On one 
occasion while travelin g to Palestine, CLINTON ordered the limousine 
driver, believed to 
"occupied territory" 


o be | 
r " , reT 


to open the window while in 
SITlrig to a aahgerous area of the West Bank. 

I initially declined to respond to CLINTON'S request; however, 
repeated demands by CLINTON forced him to open his window despite the 
danger to himself and the occupants. 


explained that security and diplomatic breaches were 
often communicated from the foreign post back to the Department of 
State via cables from the Regional Security Officer (RS Q1 . The.se. 


cables often described incidents like those described above. 

recommended interviewing current and former RSOs from foreign posts 
visited by CLINTON during her tenure for more detail into these and 
similar events. 


Early in CLINTON'S tenure as Secretary of State, she and her 
staff were observed removing lamps and furniture from the State 
Department which were transported to her residence in Washington, D.C. 


b6 

b7C 


b6 

b7C 


b6 

b7C 



FD-302a (Rev. ] 0-6-95) 


Conlinualion of PD -302 of Interview of . On 09/02/20 1 5. Page 3 

I does not know whether these items were ever returned to the 

government upon CLINTON'S departure from the State Department. 


Despite having her own DS security detail, CLINTON continued to 
utilize a Secret Service security detail while at her residence in 
Chappaqua, New York. DS security would meet Secret Service security at 
the airport in New York and turn over protection to them. This 
practice was unknown to DS prior to CLINTON'S tenure and often 

presented logistical problems to both services. explained 

that CLINTON'S treatment of DS agents on her protective detail was so 
contemptuous that many of them sought reassignment or employment 
elsewhere. Prior to CLINTON'S tenure, being an agent on the Secretary 
of State's protective detail was seen as an honor and privilege 
reserved for senior agents. However, by the end of CLINTON'S tenure, 
it was staffed largely with new agents bec ause it wa s difficult to 
find senior agents willing to work for her. :laimed to have 
had at least one conversation with Secret Service agents who 
experienced the same poor treatment. 


Inside CLINTON'S office at the Department of State there is a 
security checkpoint known as "Post 1." Post 1 is staffed by a 
uniformed DS officer and a DS agent and provides security to CLINTON'S 
inner office. CLINTON'S office is a Sensitive Compartmented 
Information Facility (SCIF) and Post 1 is located within that SCIF. By 
DS security policy, no cell phones are allowed inside the SCIF and DS 
agents, officers, and staff are required to leave their cell phones 
outside the door in secure lockers. CLINTON refused to abide to this 
security requirement and brought her cell phone, believed to be a 
Blackberry, inside the SCIF where a DS agent assigned to Post 1 was 
required to guard it. DS agents were indignant that they were required 
to follow security policy but CLINTON made herself exempt from the 
same regulations. 
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(U// FQUO) On February 20, 201 6[ 


Federal Bureau of Investigation (FBI) Special Agent^ 

i c. li/.ii' t r T» oo c ird « m ^ 


1. DOlJ 


and 


was interviewed by 
at the la w 
and 


offices of Latham & Watkins LLP, 885 3 Ave, New York City, NY. Also present were 

|of Latham & Watkins. A fter being advised of the identities of the interviewing agents, 

provided the following information: 


and the purpose of the interview, 

(U// FOUO )! Jis currently 


and d~ 


at 


1 |ai me ueparimem or ueiense i uq Ud iromi 

National Security Council' (NSC) from! luntill 

1 rrior ro me uouj p/as at tne 

During that time he held the positions of! 1 

1 from! 

Jto 

he Fall ofl 11 

|from| |until earl>] 

[and then 



(U//FOH6) 


President as needed 


[provided that there were typically three to five Deputy Committee (DC) 


meetings a week, up to four Principal Committee (PC) meetings a week, and NSC meetings with the 


Additionally, there was a weekly l unch betwee n Secretary GATES. National 


Security Advisory DONILON and Secretary CLINTON | ^ provided that 

the DoS representative for DC meetings and Secretary CLINTON was the DoS representative for PC and 
NSC meetings. 


(U//FOU0) While at the NSC 


| was responsible for working with the meeting 

participants, to in clude the D epartment of State (DoS), to coordinate and plan for each upcoming meeting. 
More specifically, ! I would review memorandums, prepare meeting packages and control the flow 

of inform ation betw een the agencies. These interactions occurred through both formal and informal 
channels] [provided that with respect to DoS matters he primarily worked with JAKE 


SULLIVAN and JOE MACMANUS. 

(U//FOUO) Prior to each DC and PC meeting the NSC would notify the participants of the 
upcoming meeting and ask that th ey submit t heir meeting packages in advance so that they could be 

distributed as read ahead material. stated that he routinely worked with SULLIVAN to ensure 

that DoS' a gendas, talking points, and formal documents were received in advance of each meeting. 

noted that he would sometime provide relevant documents, such as ODNLassessments, to DoS 
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for their use as they prepared their meeting packages] | stated that the classification level of the 

packages was dependent on the content and could be unclassified, classified or a mix. Documents and 
meeting packages were typically transmitted between agencies via the appropriate email system, secure 
fax (i.e., Washfax) or courier service. 


(U//FOUO) Following each meeting an NSC staffer would take notes and then prepare a 
Summary of Conclusions (SOC) that summarized the issue discussed, supporting and dissenting opinions, 
the final outcome arid any necessary action items. The SOC would then be approved by the NSC 
executive staff before being distributed to the meeting participants. 


(u//F©we{ 


Jwas not aware of how or where the NSC archived the SOC and related 


documents for a specific DC or PC meeting. 


(U//f'T)f"tf))| | was snown several emails mat were sent in preparation tor 

PC meeting regarding the U.S. strategy in Pakistan. However, after reviewing the email/ 

*1. i -i l i i « « ... . -- ^ „ . *" 


was shown several emails that were sent in preparation fo r an Octobe r 2009 

Istated 


in question. He 
bould not recall 


that while he remembered the topic in general he could not, recall the specific PC meet in 
noted that at that time there were numerous meeting on the subject 

the details of any of the documents referenced in the emails. While ] | could not comment on the 

specifics of the emails he did note that the emails were representative of the communications that .were 
exchanged between NSC and DoS as they were preparing for a PC meeting. 


(u/ / r ouo l 

meeting. However] 


the limited content of the email. 


was shown an email that was sent in preparation for a June 2011 PC 
could not recall any specifics regarding the PC meeting in question' given 


(U//FOUO) A copy of the original interview notes and the referenced emails are attached in a 1 A 
envelope. 
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(U// FOUO ) On 1 0/23/20 1 5 Speci al Agent (SA )f 
ation f FBU. DObI J SSAN | 


and SAl 


Federal Bu reau of 


was interviewed in person by SA 


in FBI Headquarte rs. After being advised of the identity of the 


b6 

b7C 


interviewing Agents and the nature of the interview 


provided the following information: 


(U//FOUO][ 
Service (DSS1 ini 


began working for Department of State’s (DoS) Diplomati c Security 


where he was assigned to the DSS Los Angeles Field Office. In 


was selected for an as signment with the Secretary of State’s security detail. 


served on the Secretary’s detail until 
new agent training. 


when he joined the FBI as an SA and attended FBI 


(U//f©tte) When] 

RICE, was the Secretary of State \_ 


Iheuan his stint on the Secretary’s detail, CONDOLEEZZA 
detail assignment carried over to HILLARY 


b6 

b7C 


b6 

b7C 


CLINTON, when she was appointed Secretary of State in 2009. 

(U//F OU O) DSS covered the majority of CLINTON’S protection while she was in the 
Washington, DC, area. However, when her husband was in town. United States Secret Service (USSS) 
would cover the bulk of the protection detail responsibilities when she was with her husband or in the 
residence. 


(U//F OU O) USSS would provide security for CLINTON'S 3067 Whitehave i Street NW. 
Washington, DC, address during the day and DSS would cover the overnight detail. _ 


was 


never inside the CLIN7 ON’s Whitehaven residence, as DSS usuall y posted in a veh icle outside. 
CLINTON had a secure telephone in her Whitehaven residence and | 


assumed it was in a 


secure room. 
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(U//FOUO) CLINTON usually traveled to her home in Chappaqua, NY, via a US Airways shuttle 
from Reagan National Airport (DCA) to Westchester County Airport in White Plains, NY. USSS would 
handle CLINTO N’S security in N Y. and DSS would have a small presence to maint ain CLINTON’S 


was never inside CLINTON’S Chappaqua residence 


communications. 

was kn own as the CLINTON’S Chappaqua “house guy/scheduler.” The security detail would often 
contact to determine the Secretary’s departure time. 
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The Secretary’s security detail chain of command was as follows: 


1 Special Agent in Charge (SAC) 

4 Assistant Special Agents in Charge (ASAC) 

3 Shift Leads (SSA) 

Approximately 45 SA’s assigned directly to detail shifts 



the SAC during CLINTON’S tenure as 
two ASA C’s during the sam e time period 


SA, and both[ 
CLIN TON'S detail.! 


agents assigned with 
all still employed with DSS (possibly in the Washington Field Office). 


it 


i 




3 and [ 


I were shift 


pre 


(U//POU©) CLINTON’S office was located on the 7 ,h floor of DoS Headquarters. The entire 
Secretary’s suite was a Sensitive Compartmcnted Information Facility (SCIF). The DSS security 
detachment maintained a Post directly outside the Secretary’s office. The DSS space was known as Post 
One (I). DSS personnel were not authorized to bring their mobile phones into Post 1, as it was located 
within the SCIF. CLINTON did keep a mobile phone inside a desk drawer inside Post 1 , but when she 
would remove the phone from the desk, she would take it to a non-SCIF space to make calls or use the 
phone. 
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(U//Fe©0) HUM A ABEDIN and CHERYL MILLS were among CLINTON’S staff members 
who had offices located within the 7 !h floor Secretary’s SCIF. In addition to ABEDIN and MILLS, 

[ and JAKE SULLIVAN, were part of CLINTON’S main 

“traveling crew.” MILLS did not accompany CLINTON on many overseas trips. 


(U//fOU©)| Jcould not recall the specifics surroundin g the electronic d evices used by 

CLINTON’S executive staff, but he assumed they were BlackBerry devices | did not interact 

with CLINTON nor MILL S via email, but sometimes he would receive a forwarded email with their 
accounts listed in the chain.l 


CIintonfoundation.org accounts 
originating from a Gmail account, however, he was not entirely sure. 


1 reme mbered receiving email chains that contained 
also thought he recalled seeing emails from 


(U//F OU 6j In addition to the Secretary’s DSS security detail, CLINTON also traveled with a 
team of Security Engineers who were specifically assigned to her staff. These Security Engineers would 
travel overseas with CLINTON for the specific purpose of setting up and maintaining her 
Communications while on travel. The Security Engineer Team generally set up a secure communication 
post inside the Embassy, or a hotel room adjacent to where the Secretary would stay. The communication 
post would be manned 24 hours a day. 
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(S//KP) The team of Security Engineers wou ld send the necessary eauipment to set up the 
Secretary's communications via diplomatic pouchesl 


bl per 


Secretary's use ol Diplomatic Touches, 
to the preparation and transport for overseas travel. 


As it relates to the 

was unaware ot the process and procedures related 


(U//F QUO) When traveling overseas in advance of, or with, the Secretary, the Regional Security 
Officer (RSO) would usually provide CLINTON’S security detail a letter, prior to, or on arrival. The letter 
provided guida nce on what to expect from a security standpoint while in a particular country. 

I was not sure if a similar letter from the RSO was provided to the Secretary and/or her 
executive staff. 


(U// FOUO) The Secretary’s security detail would “hotwash” after an overseas trip, to compare the 
advance team’s preparation to what actually took pla ce during the Secretary’s travel. The RSO was not a 
part of these after action discussions ] | believed an RSO would send a cable to the RSO 

assigned to the Executive Office at DoS Headquarters if there were any security issues concerning 
CLINTON and/or her staff. 


(U//F OU Q) Agent notes are maintained in a 1 A envelope. 
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D.C. 20037 . office teleph one (202)[ 
date of bir th 


United St ates Depart ment of State (STATE) . 515 22 n0 S treet NW. Wa shington. 

' i[T 


mobile telephone (202 


email 




/•st aic. gov. 


was interviewed on his mobile telephone by FBI Special Agent! 


After being advised of the identity of the interviewing Agent and the nature of the interview, 


provided the following information: 


The Information Programs and Services (IPS), Bureau of Administration oversaw the program for 
Congressional inquiries and Freedom of Information Act (FOIA) requests. The House Select Committee 
on Benghazi requested emails to or from former Secretary of State Hillary CLINTON related to Benghazi. 
It was determined there were 296 emails related to tire Benghazi request. After IPS officials performed 
their review of the 296 emails, they referred emails for classification determination to four outside 
agencies, specifically the: 1) FBI; 2) CIA; 3) Department of Defense (DoD); and 4) National Security 
Council (NSC). 


IPS officials have regular' points of contact (POCs) at all agencies and STATE bureaus that the 
IPS would send classification determination referrals to in response to Congressional or FOIA requests. 
The regular P OCs at the agenci es listed above were as follows: 

- FBI: i-no con tact information provided. 

- CIA hno contact information provided J boss was 




IPS team, | 

- DoDl 

provided. 

- NSC: 

was pressed 


ft 


Tthe CIA ’s FOIA branch s imilar to STATE’S 


£ 


email wad 


qjucia.iz ov. 


Office of the Secretary of Defense (OSD) — no contact information 


retired n ow, hut was the PO C earlier in Z 
NSC’s current POC waj I te lephone 20: 

J believed] [might inform] 


' : ir-;r ono u 



Legislative Affairs, if contacted by the FBI. 


he Benghazi request 
email 

and 


Before IPS conducted their review of the Benghazi request^ 


Attorney, Offi ce of the Leg al Adviser performed their own, independent review of the 296 Benghazi- 
related emails. 


a classification determination. 


fe vjew teaiff used different POCs at other age ncies to review the 296 emails for 
did not know why: 1 j | 


team did a review, as that was 
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, ^ _ 


jifi'erent POCs than the regular POCs IPS used: 3i wha t 
am used during their review; and 4) why| [earn 


reviewed and produced tire 296 emails to the House Committee prior to IPS conducting their formal 

review. 


- DOJ 


para used reviewers from the foll owing agenc ies: 1) Department of Justice (DOJ); 2) 

team's POCs were as follows: 


Hi JO! lOW 

CIA; 3) DoD: and 4) White Hou se Counsel (W HO. I 

-telephone 202 


- CIA: When asked directly who the CIA reviewer was j anti her team stated they did 


coordinate thr ough the CIA hut, to date, h ad not given a name for wh o their CIA reviewer was. 


-telephone 703 


email 



feinail.mt). 

1 



- WHC 

—telephone 20 jJ 

H email r 

[hc.vho.ei. 

m.gov 


]did not know why 


die WHC instead of the NS C, 
the wrong POCs. I S tated that 

instead of the NSC. 


|team used a POC at the DOJ instead of the FBI and a POO at 

did not want to provide his thoughts on why he thought they used 
team made a “rookie mistake” when they used the WHC 


h ummed up die issue with the different POCs as frustrating a nd again pointed out that IPS 
i<i 296 emails to the NSC. FBI, CIA and DoD whereas ! I team referred the 296 emails 


referred the 

to the W HC. DOJ. C IA and DoD, and none of the referents were known to be the same between IPS' 


ream and£ 


team. 
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FEDERAL BUREAU OF INVESTIGATION 


Dale of tmiscnatioa 0&'24.CK;-.i 


D.C. 20037, office teleph one (202 )[ 




date of birth. 


mobile telephone (202 1 


«. , 1"-"'— \~~Jl r 

was interviewed in person by FBI Special AgentsJ 


email 


li fcstate.gov 
pdi 


pd FBI Headquarters. 935 Pennsylvania Avenue Northwest, Washington, D.C. 20535, A lter 

being advised of die identities of the interviewing Agents and die nature of the interview. provided 


the following information: 





for M 


plaited working at STATE i.ij 


and sijicejj 


k-vas the 


argaret “Peggy” GRAFELD, Deputy Assistant Secretary, who was responsible for 


the Privacy Act, and information management for STATE. A/G1S was die office dial provided guidance, 
usually through memorandums, that oversaw records compliance for all STATE employees. A/OIS also 
oversaw the coordination, production and maintenance of STATEN Foreign Affairs Manual. (FAML 


though A/CdS was not responsible for the FAM.'s content. 


| Joyce BARR. Assistant Secretary, Bureau of Administration, was 
GRAFELD’s boss and immediately subordinate to Under Secretary for Management Patrick KENNEDY, 


hi or around August 201 4. 


Jin Legislative Affairs i,u xmrk review and arudusdus aial&rii related iu immiriiss m.im ik: 1 

Select Comm ittee on Benghazi. 


nose 


STATE'S Legislative Affairs. It was around that time that 


learn about records nr induction an d the FOIA process. Around the same time 


telephone call from 


arty Q i NTON -r elated e mails in t he 


l 


he Legal Adv. 
] ,pst file that[ 


A ttorney, offec of th e Legal Adviser, who asked: 


iad ft 


| started to 

rr.p.Hiyd a 

f there were 


request. I l answere q | tf;at there were CLINTON-related emails in thej 


.am a Lircyious FOIA 


.pst file. 


The Information Programs and Services (IPS), Bureau of Administration oversaw the FOIA. 
program. In or around November or December 2014. in response to a FOIA request, IPS officials were 
notified they would pick-up 14 banker boxes of emails at former Secretary of State Hillary CL 
office related to CLINTON'S use of personal email to conduct official STATE: business. Later J 



investigation On 0& f H# 2 P ' l5 „ ai .Wasbi .0£T.&!,. ,t5Q . 
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SA 









This doeianent corasfcts neither fecoartiendauims sor candnsso;;:; of 'hi FRL fs is the properly of the FSt said is loaned ;o year i^.envy; 
and iis contents arc not to be distributed outside your agency. 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b3 

b7E 


fa6 

b7C 




FD-3'52a iQ-6-^S} 


\ to nick-no cniv 1 boxes at Williams & Connollv, LLP. On or 

around December 4 

picked-up 12 boxes at Williams <fc Connolly. 1 


officials were unsure what happened to the other two boxes. The Items in the boxes were stacked 


>014. 
and IPS 


folders or known method of orsamzation. 


(Global Pu blishing Solutions. who used classified copiers and made two-sided 

~\ a copy for officials in STATE Executive 


copies of all recei ved materials for 

Secretariat (S/ES), and a couple of copies for IPS officials to use for their FOIA review. The original 
emails were shrink-wrapped and placed in a sensitive compart niented information facility in Newington* 
Virginia. 


In March 2015 J 

(first heard of issues with the CLINTON-related FOIA. process. T 1 


the FOIA program. The normal FOIA process would be where IPS 


received a FOIA request then IPS forwarded that request on STATE forms via email to the person who 
the FOIA request pertained to. The pertinent party would then fill out the form and provide the IPS office 
the requested items, which the IPS office then reviewed prior to a release of the information back to the 
initial requestor, in the CLINTON-related FOIA case, IPS received an unprecedented amount of emails 
in hard copy form, as there were 52,455 work-related pages to review. In a letter hand-delivered, to 
KENNEDY by Cheryl MILLS, or MILLS’ attorney, it was stated, “in an abundance of caution, they 
overproduced.” 


Separate from the CLINTON-related FOIA request, there was a Congressional request for 
CLINTON-related emails related to the Benghazi incident from the House Select Committee on 


Benghazi. A. review was conducted of 296 emails, probably bv pe rsons wh 


a, pp 

;er. |_ 


state- 


ed(_ 


Legislative Affairs and Office of the Legal Adviser. 

why and how those 296 specific emails were picked and why and how they cone 
separate from any review the IPS uni t conduc ted. Previously, IPS had always been in charge of 


ked in tfe e Bureau of 
would know 


is. worked fo tire) 
_jand[ Jwc 


acted their own review, 


«* *? »*» ' 

Congressional document production;! pated attorneys from Legislative Affairs and Office of the 


Legal Adviser would normally only weigh In o n t 
conduct the review and production. jandj 


he legality and scope of requests, but IPS would actually 


the material with ST ATE bureaus and other agencies. 


kated they coordinated the prop er review o f 

After their own review was finished, and 


produced the requested material for the House. Committee, prior and independent to the IPS 


unit’s formal review. 


stated those involved at IPS felt the ?"' floor, or leading STATE officials, had their own 

ideas on how to formally review the 296 emails. KENNEDY’S initial idea for how to review the 29 6 
email was as follows: 1) the IPS officials conduct a review; 2) IPS officials referred items to other STATE 
bureaus and inter-agency partners for their review; 3) IPS officials recei ved the referral determinations 
and submitted to the House Committee. The review process that was finally decided upon was as 
follows; 1) the IPS officials conduct a review; 2} IPS officials referred items to other STATE bureaus and 
inter-agency partners for their review; 3} IPS officials received the referral determinations and submitted 
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but none were deemed a B(J) exemption. Most of the items with CIA redactions were emails item 
Sidney BLUMEHTHAL. One item was deemed clas sified a ccording to tir e FBI and KENNEDY held a 

among others. In that meeting. 


closed door meeti ng attended by tire FBTsf 


[and IPS 


KENNEDY asked ! [ to change the FBI’s 8(5) upgrade classification, but | [ did not change 


the FBI's stance. On May 22, it was decided by the IPS team they would keep the upgrade of the one 
FBI-related email and the IPS officials sent David .KENDALL, Attorney, Williams &■ Connolly, LLC, a 
letter informing him of the results. 


There was a powerful group of very high-ranking STATE officials that some referred to as “The. 
7 m Floor Group" or “The Shadow Government." This group met every Wednesday afternoon to discuss 
the FOIA process. Congressional records, and everything CLINTON-related to FOLA'Congresaional 
inquiries. The known regular attendees included Jonathan FINER. Chief of Staff for Secretary of State 
John KERRY, Jennifer STOUT, Deputy Chief of Stuff, Heather HIGGINBOTTOM, Deputy Secretary of 

State for Mfoiaastmit aad Rsgfluress. KENNEDY, Julia FR1 FIELD, Assistant Sectary. Legislative 

Affairs] | Office of the Legal Adviser.! 

Office of the Legal Adviser overseeing STATE's| |] | in 


Normally, with larger FOIA requests, such as with the CLIN TON -related FOIA request, IPS 
would schedule a rolling release -that meant every few weeks or month , the properly reviewed and 


^ r 

approved material would be made public. However,|_ 


and The Floor Group argued 

the release should be done all at once in January 2016, for coordination purposes. While IPS officials did 
not have control of the release process of the 296 emails related to the House Select Committee on 
Benghazi's request, they did have control for the release process tor the approximately 30,000 emails, or 
52,455 pages related to the CLINTON FOIA request and it was decided to be a rolling release. 

On July 15, 2015, IPS on- boarded Intelligence Community Inspector General (ICIG) reviewers to 
help with the overwhelming review process. The ICIG reviewers were trained up and had been integrated 
Into die FOIA review process to help ensure IPS can meet t he mand ated release of all non-exempt/non- 


redaeted emails by the January 15, 2016 deadline. To date 
referrals already sent out 8>r classification determination. 


was aware of approximately 305 


stated S/ES are the Custodian of Records for all Secretaries of State and Deputy 


Secretaries of State. As such, S/ES received all taskers from the IPS team related to FOIA requests that 
involve Secretaries of Stale or Deputy Secretaries of State. S/ES should also have answers regarding 
STATE'S procedures that dealt with information technology, including hardware and software for STATE 
em ployees' emails and telephones. Joseph MaCMANUS. Executive Secretary and Ambassa dor. S/ES, 


and 


S/ES. or 


someone in the S/ES Information Resourc e. Man asm -men! (S/ES/IRM) unit should know specific details 
about CLINTON’S at-home server set-up. | [ stated S TATE servers were located at the Enterprise 
Server Operations Center (BSOC) and Managemeni/IRM (M/IR.M) would be knowledgeable about 
STATE servers. 
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. On 08/19/2015 . Paso 


High-ranking STATE officials, described as some Assistant Secretaries and all Under Secretaries 
and higher, used a separate network .tor emails and record-keeping called the Principal. Officer Electronic 
Management System (POEMS). The vast majority of STATE employees were not on POEMS. 


stated .he heard third-hand the National Security Agency (NS A) set-up a .computer for 
CLINTON and the FBI should talk to S/ES about the specifics. Additionally, .FBI should ask S/'ES about 
Jake SULLIVAN'S email being hacked, as maybe that had something to do with CLINTON'S emails or 
why the NSA set-up her computer. 
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FEDERAL BUREAU OF INVESTIGATION 


Dale oftransc.fif«kM? 07/31/2913 


Lf Pl atte R iver Ne tworks. 5700 Washington Street. Denver* 

Colorado, 80216. telephone (303) 1 1 e mail lTniatteriver.com. was contac ted in person bv 

Federal Bureau of Investigation Sp ecial Auemj j s nd | After was 

advised of the identity of the agents [identified himself as ] Platte River Networks and 

stated that he had contacted the com pany's leg al counsel about the scheduled meeting with the FBI on 
July 29. 2015. Counsel had advised [not to answer questions from the FBI without counsel 

present. 


*1 

provide 

— ,_i 

|a< 

am 

t 


tok po interview would be necessary; howev er. SAl 

document with instructions for Plane River Networks, 
o an empty conference room. 


jieeded to 

1 invited both SAs 


S/ provided a copy of a FBI preservati on letter a ted July 27, 2015, signed by Charles H. 

Kafele IV, Section Chief, Counterintelligence Division. commented company officials had 

wondered how long it would take for them to be contacted about the named account. I [asked for 

cl arification about the preservation letter and the responsibilities of their company. SA then read 

to l l a portion of the preservation letter and explained the FBI was not asking for any information 

at this time, but that the letter was served in anticipation of future legal process. The letter requested that 
Platte River Networks preserve any records to date which were identified in the aforementioned 
preservation letter. Agents also explained the request for non-disclosure. 

ex pressed h is conce rn about P latte River Networks becoming a target if this matter ever 

became public. SA [ provider ] | with her contact information at FBI Denver. 

[ was also provided FBI Strategic Partnership Coordinator (SPC) brochures that have 
information about Counterintelligence security awareness. Agents also discussed the FBI’s Infragard 
program. 


favwtigation on ?5 7/ 2 9/20 I 3 <a Denver. Colora do 
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■ Date of transcription 0S/07/20 ! 5 

On August 6, 2015, KATHERINE M. TURNER, Partner at the law 

offices of Williams & Connolly LLP, 725 Street, N.W. Washington, 

D.C. met at her place of employment with Agents of the FBI pursuant to 
an agreement reached by correspondence between the Department of 
Justice and Williams & Connolly. This agreement (enclosed) , reached on 
August 6, 2015, provided that Williams & Connolly voluntarily turn 
over to the FBI three (3) thumb drives containing 30,490 emails from 
former Secretary of State Hillary Clinton's ©clintonemail . com account 
as well as hard copy printouts of the emails and a laptop computer 
containing a duplicate electronic copy. 

At approximately 2:30PM, TURNER met Agents at the loading dock of 
her firm and transferred 22 legal boxes of documents to the FBI's 
possession along with a laptop computer and three (3) thumb drives 
described in detail below and on the enclosed FD-941, Consent to 
Search Computers, and FD-597, Receipt for Property. 

Item 1: Lenovo Thinkpad. T420, S/N PB-YCSL2 12/03 

Item 2: Lexar Micro 16GB thumb drive, black and silver in color, 

S/N LTDTT1 6GB -000-100 IDA (original) 

Item 3: Lexar Micro 8GB thumb drive, green and -white in color, 

S/N LTDTT8G3 - 0 0 0 - 1 1 7 AU 

Item 4: Kingston 8GB thumb drive, silver in color, S/N DTSE9 

Item 5-27: 22 legal boxes containing paper copies of the above 

described 30,490 email communications 

TURNER explained that the original thumb drive, Item 2, was 
obtained from Platte River Networks but did not describe how it was 
collected or under what circumstances. TURNER described the other two 
thumb drives as identical to the original though one of the drives 
contained two complete copies of the email set. The laptop computer 
was previously used by the firm for unrelated matters but was believed 
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to have been cleaned of privileged material prior to use and storage 
of the 30,490 emails. This laptop has not been connected to the 
internet, since being loaded with an electronic copy of the emails. The 
user name for the laptop is n . \ internet only" and the password is 
” Internet Only ! 2 " . 

TURNER explained that the firm maintains six (6) additional 

laptop computers, each of which contain identical digital copies of 
the 30,490 emails, but also contain attorney/client privileged 
communications and as such are not being turned over to the. FBI at 
this time. TURNER advised her firm is in negotiations with the 

Department of Justice over the disposition of these laptops. 

Prior to departing, TURNER signed the enclosed FD-341, Consent to 
Search Computers, and FD-597, Receipt for Property. The original -was 
kept by the FBI and copies were made by TURNER for her records. 

Subsequent to the FBI's collection of the above. Items 1-27 were 
transported to the Washington Field Office of the F3I where they were 
entered into evidence, and given IB numbers. Copies of the intake 

sheets and FD-1004 are enclosed with this communication. Items 1-4 
were then transported by members of the FBI's Forensic Analysis Unit 
to Quantico, Virginia for storage and evaluation. Items 5-27 are 

presently stored in evidence control at the Washington Field Office. 
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Date of transcription l 2/2!f2015 


201 sf 


(U/ / F OUO) On December 18 , 

I E xecutive Secretariat - Information Resourc e Management Mobile Communication s tS/RS - IR M 
MC), at the U.S. Department of State, email a<jdres< | [ alstate.g ov. telephone 20q I 

was interv iewed by Federal Bureau of Investigation (FBI) Special A gents | t mdT 


fter being advised of the identities of the interviewing agents, and the purpose of the interview, 
provided the following information: 


(UZ/FOU el h as worked at the Department of State since | l uid has held a variety of 


IT related positions that include mobile computing, network ent»ineerinu and developing the State 

Msssagink-anti Archie Retrieval Toolset (SMART) system. I 


(U./ T'OUO ) The MC team is responsible for establishing secure mobile voice and data 
communications for the Secretary of State (Secretary) and his team when they are traveling domestically 
and internationally. Prior to a trip by the Secretary and his team, the MC team assembles kits of 
networking equipment at their lab in Springfield, VA. The kits include networking components such as 
switches, routers, encrypters, laptops and VOIP phones and are customized based on threat stream 
information provided by the local Regional Security Officer. The equipment is then tested to ensure that 
it is working properly and that it hasn’t been compromised before being sealed in a diplomatic pouch and 
sent to the U.S, diplomatic establishment at their destination. Upon arriv ing onsite, the team collects the 
pouch and checks that the seals haven’t been tampered with. p rovided that there are nine kits 

of networking equipment and that multiple kits are deployed when the Secretary is traveling to multiple 
locations on a single trip. 


(CM) 


bl 
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bl per DOS 



bl per DOS 


(U/ /RMJO) The communication networks established by the MC team provide the Secretary and 
his staff with secure data and voice connections, so that they can connect back to the Department of State b6 

network to securely conduct official business. Although the networks established by the MC team create b7 ‘ 

encrypted data chann - Is. users are still required to use a fob to access their Department of State email 

accounts. noted that the MC team continuously monitors the network encrypters to watch for 

any signs of an intrus on or other compromise of the system. 


(U//yQfciO) | p rovided that the Secretary and his team typically do not use the SBU 

network established by the MC team for personal matters. He noted that they are free to use the standard 
internet service in their own room, as any other hotel guest would. 


mm 

When classified documents, or facsimiles, are sent for the Secretary to review they arc usually delivered 
to the MC team by the local U.S. diplomatic establishment, the MC team then reviews the classification 
markings and page count before providing the document to the recipient. Once the review is complete the 
MC team collects the document, counts the pages and then enters the event into a log. 


bl per DOS 


(U//-F OUO ) If an urgent message arrives at the mobile command post for the Secretary or his team 
the MC team will alert the recipient that a message has arrived and that the recipient should return to the 
command center. Depending on the Secretary’s location, t ins might me an sending a message to one of his 
Line Assistants or knocking on his door if it is after hours. | stated that the Secretary does not 

have a secure cell phone and that he is typically notified to return to the mobile command center even 
though there are usually secure communications in his car. 


<U//FOfcO)[ 


[stated that the MC team’s policies and procedures are the same for 


domestic travel as for international travel. However, in the case of domestic travel the communication 
kits are sent via Diplomatic Security instead of via the local U.S. diplomatic establishment. 
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(U// F0U O) The MC team is typically staffed by two to four MC team members, depending on the 
site. AH of the MC team members hold a TS/SC1 clearance and receive extensive training on the 
equipment and security procedures before their first deployment. The MC team members are from various 
components within the Department of State and may be contractors. Foreign Service members, or career 
civil servants. The average team member is on the team for t wo or three ye ars befo re moving on 
another assignment within the Department of State. However] jiotcd that[ 


Jhas been on the MC team for approximately ^ 


years. 


(U/ /FOUO) [ 


j.vas not in a position to comment on how the MC policies and procedures 

had changed between 2009 and today but he noted that they are constantly working to apply faster and 
lighter techn ologies That will achieve their mission of providing secure and reliable communications. 

j tad no concerns with the MC team's ability to meet its objectives ^vei^ibfcjaaQmsgsihaLiL 


had. He provided tha 


TUT 


l 


‘5 


may be able to provide more insight on how the MC team operated between 2009 and 
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(U//FOOO) A copy of the original interview notes are attached in a 1 A envelope. 
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Date of transcription 6/21/2016 


(U/ /FOUO ) On June 21 ,20 16, 

by Federa^ Bureau of Investigation U-BD Special Auents[ 
residence. 


Date of Birtl]" 


es of ft 


1, was interv iewed 
lat his 


and the purpose of the interview I 


A. After being advised of the identities of the interviewing agents, 
rovided the following information: 


U f /zf-OtfOll 1 worked at the U S Department of State (DOS) for approximate!)] {years before 


leaving in| || [telecommunications specialist under t he Exec utive Secretariat 

(S/ES) at DOS during HILLARY CLINTON’S tenure as the Secretary of State] Jioted that his daily 
duties remained the same during this period despite several reorganizations which moved his position to 
different departments. He was responsible for supporting the installation and operation of secure 
communication equipment at DOS. This in cluded secure video, secure voice, the Washfax, as well as 
regular telephone and facsimile equipment] kvas not responsible for email s upport, w hich was t he 
responsibility o f S/ES - Inf onnation Resource M anagement (S/ES-1RM) ] [ reported to] | 

| who was the l ] s/ES-IRM under JOHN BLN I EL. 


qj//yeUO) l [ supported CLINTON ’s transition to DOS and was responsible for establishing 
secure communications in her office, vehicles and residences. He initially conducted a survey at each 
residence to identify where the commercially provided telecom sendee entered the r esidenc e (i.e., the 
“point of presence”) and to assess what equipment needed to be installed. Thereafter ] [ connected a T1 

a it and ran lines to the locations in the residences .where the equipment would be installed. Although 
installed the equipment it was sometimes maintained by other departments within DOS. For example 

a maintained the Defense Red Switch telephones (i.e., red phones) once they had be en installed by 
The point of presence in the Whitehaven residence was in the basement and nan lines from 
there to closet in the third floor SCIF. He then dropped additional lines to the second tloor office area so 
that an additional STE and red phone c ould h e installed. Similarly, the point of presence at the Chappaqua 
residence was also in the basement and | | ran lines to a small luggage closet and then to the final 
equipment locations within the residence. 

(U//E OUQ ) During the tra nsition!" | was also tasked to research the feasibility of obtaining a 

secure BlackBerry for CLINTON] kvas directed to do this by a combination of the following people: 

DAN SMITH (Executive Secretary), LEWIS LUKENS (Deputy Assista nt Secretary). JOHN BENTEL 
(S/ES-IRM Director), and the Operations Center Director who was either ] 
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the time. DOS wanted to assess the feasibility of using secure BlackBerry phones because 


CLINTON and her staff were BlackBerry users so DOS wantedtonrovide them with resources that they 
were familiar with. However, after conducting his assessment ] | found that the secure BlackBerry 
phones would require an entirely new infrastructure, which was cost prohibitive; and the actual devices 
were too thick. 

OJ// rOUo f [ was shown an email with the subject “State Department Telephone Services at 
Secretary Clinton’s Residence” that he sent to LUKENS and ABED1N on January 27, 2009. The email 
summ arized, the telecom equipment that was installed at the Whitehaven residence. After reviewing the 
email,! Explained that “CMS VoIP” line referred to the direct phpne line to the White House and that 


the “IST/Red Switch” was a red phone that was installed as a backup to the CM S VoIP line. The 
“Business Lines” and “Ops Dedicated Drop” were standard phone lines ] stated that not all of the 


installed equipment belonged to DOS and noted that the CMS VoIP system belonged to the White House 


illec 

Jsai 


said he did this in an effort to give the Secretary the most reliable equipment but this approach 


caused some strife within DOS. 


(U// FOUO) ! | from S/ES-I RM. wa s responsible for installing and 

managing CLINTON’S computer systems at the residences ] C oordinated his installation activities 
with S/ES-IRM and typically did not conduct his work when they were on site in effort to avoid flooding 
the residence with people. 



(U//F QUo J | was show ^ an email with the su bject 

Jand[ 


•ash” that he sent to BENTEL^ , — , 

lexplained that a hotwas h was c onducted to develop a solution for any technical problems they had or 


‘Secretary Residentia l Installation 

on March 17, 2009. 


complaints that they received ] [ stated that they had significant issues with the unclassified telephone 
lines at the residence in Chappaqua. He attributed this to the number of service providers that a direct line 
traversed as it connected Washington and Chappaqua. As a result the lines consistently had bad 
connections. Additionally, the red p hone on the second floor in Chapp aqua did not function properly and 
eventually CLINTON directly, aske d [ 0 remove the phone | [ stated that he r emoved the phone but 
it created some internal issues for him as the phone was maintained by IRM and not] | group. 

(U/ffQtfQ j [ stated that the “Server: Basement Telephone Closet,” as listed in the attachment 
to the aforementioned “Secretary Residential Installation Hotwash” email, referred to the point of 

presence for the telephone system in Chappaqua and was not a reference to a computer server] Jwas 

aware that there was an email server in the Chappaqua residence. However, he believed it was tor t tie 
CLINTON’S family email and he did not realize that CLINTON was using the server for DOS business. 

(U// FOUO ) ] [ could not recall when he first learned that CLINTON was using a private email 
account but stated that it was sometime during her tenure. He did not think that CLINTON’S use of a 
private em ail acco unt was odd because COLIN POWELL had a priv ate ema il account that he accessed 
from DOs ] ilso assumed CLINTON had a DOS issued account. | p id not communicate directly 
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with CLINTON on email and instead worked through HUMA ABEDIN when necessary ! lid not 
recall anybody ever expressing concern over CLINTON’S server or email, but noted that he did not attend 
the S/ES-1RM meetings were such topics would likely have be discussed. 

(U// EOUQ) A copy of the original interview notes and referenced documents are attached in a 1 A 
envelope. 
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Date of transcription 5/16/2016 


l 


and[ 


was interviewed by Federal Bureau of 


On May 12, 2( 

Investigation (FBI) Special Agents , , 

F.i spnhnwer Executive Office Building. 1650 Pen nsylvania Avenue NW, Washington, DC 20 502. Also 


3 


in room 374 at the 


counsel] 


present was 

Department of Justice attome>] 

agents, and the purpose of the interview 


1 attorney at ] and 

After being advised of the identities of the interviewing 
[provided the following information: 


~]is currently employed as the 


at the National 


(1 I//F0HQ’)! r 

Security Council ! [ has held a Top Secret/Sensitive Compartmented Information (TS/SCI) 

clearance since 2003 when he was originally sponsored by the Central Intelligence Agenc y (CIA). 

is not,, nor has he ever been, an Original Classification Authority (OCA). In early^ . 

began a fellowship at t he Department of State (DOS ) in the South Asi a Bureau. After mov ing to the Iran 


desk for a few weeks 


a 


Jbegan working a<£ 


Representative for Afghanistan and Pakistan (SRAP). While at the SRAP office 
PAUL JONES, FRANK RUGGIER O. MAR C GROSSMAN a nd RICHARD HOLBROOKE 
remained working for the SRAP unti l [ when he moved to| 


for the Special 
worked for 


at DOS. 


(U// FOUO ) While he worked at t he DOsJ 


Secretary of State HILLARY CLINTON 
the DOS was responsible for information fl ow to the Secretary of State 


I at ths 

:on.[ 


was unaware of how information flowed to 

was generally aware that the E xecutive Secretariat at 


kould not say who 


communicated or emailed with CLINTON] |did not email or communicate with CLINTON 

directly and did not know that CLINTON had a private email address hosted on a private server until he 
was made aware via various media outlets in March 201 5. 


(U// FOUO J was assigned official DOS ema il account s on both an unclassified network 


* A 1 ° r 

and the Secret Internet Protocol Router Network (SIPRNet)[ 


|did not have a Joint Worldwide 
Intelligence Communications System (JW1CS) email account that he could access in his of fice, but w as 


aware that he was issued one by the Bureau of Intelligence and Research (INR) at the DOS. 
indicat ed he rare ly used his JWICS account because his work did not necessitate it and it was hard to’ 

J [ cou ld not reca ll any specific DOS training pertaining to official email usage guidelines. 


access. 


policies or practices. 


3 


rated “obviously classified information goes on classified systems.” 


b6 

b7C 


b6 

b7C 


b6 

b7C 


b6 

b7C 


TrwPAtipfltinn nn 

5/12/2016 at 

Washington, D.C. 


b3 

b7E 

File# 

| 

h(>2 


Date dictated 

N/A 








b6 

By SA 






b7C 


This document contains neither recommendations nor conclusions of the FBI It is the property of the FBI and is loaned to your agency; it 
and its contents are not to be distributed outside your agency 


FD-302a (Rev. 10-6-95) 


Continuation of FD-302 of Interview ot^ 


L, Rage _ 


(U//F0«ef 


stated Principal’s Committee (PC) meetings were initiated by the National 
notice to government agencies. The PC meetings would involve participating 


Security Advisor via official 
government agencies presenting their policy on topics prescribed by the National Security Advisor. A 
Deputy’s Committee (DC) meetin g would inv olve the same process although convened by the Deputy 


National Security Advisor. Durin 


I 


tenure at the DO S, he reca lled weekly DC meetings related 


to Afghanistan and Pakistan issues. While in the SRAP office, ! [ would contribute to packages 

assembled for DC and PC meetings. Usually, the Deputy SRA P would as sign various taskings for a 
policy paper to be used in a DC or PC. Within the SRAP office] [dated there was no science as it 

’ ‘ * ‘ sd w ’ ’ ’ 1 

Jwa 


related to who was assigned work. The assignments could be based on your area of expertise or who you 

knew within DOS.| ]was unaware of any formal process when collaborating, drafting, editing or 

publishing a written product with another bureau or office at the DOS. 


Jwas unaware of the term “upclass” as it referred to the classification of a 


(u//Fe«a£ 

.written product. 

[recalled seeing written product with suggested classification markings and he would always 


did not know how classification of a written product was ultimately decided. 


adhere tn those by appropriately marking the same information carried over to his products or edits. 
[stated portion parkings at the DOS were uncommon before WikiLeaks released classified DOS 


cables on their websitd 


“more of an art than a science.” 


understood the classification process to “happen organically” and to be 


(U/ /POU O) At this point in the intervie w. Agents d isplayed documents and emails concerning a 


October 5, 2009 PC meeting involving the DOS. [ provided the following information: 


(u// rou e 


recalled the general topic of th e October 5, 2009 PC meeting, but did not 


recall the exact meeting or any of the displayed documents, 
meetings regarding Pakistan and Afghanistan polic y in 200?T 
any portion of the briefing paper or the attachments. 


— , I- • — <p i — r , could p 

briefing paper or the attachments. When sh ow n metad ata indicating! 
associated with the foregoing briefing paper 1 stated the met; 


associated with the foregoing briefing paperj I stated th e metadata interred 

attachments, or possibly saved them at one point, butj did not recall doing 


[stated there were many PC and DC 
jdid not recall drafting or editing 
recall who drafted any of the 
Jirafted the attachments 


metadata interred he interacted with the 
so. 


(U// FOUO ) described the | R eport as the result of a review of Afghanistan and 


Pakistan policy reques ted hv Ge neral STANLEY MCCHRYSTAL. The repo rt resulte d in a request for a 


troop surge in the area.j recalled there bei ng a classi fied version of the] [report released and 

- o • — • 


then shortly after, an unclassified version released 


elieved it was stand ard practic e to have both 


classified and unclassified versions of a document released around the same time 
report as relevant one dav ^ and the n shortly after, irrelevant. During his tenure at 
not recall ever reading the 


ien shor 
Ire port. 



escribed the 
could 


(U//f OUQ )[ 
while at the DOS. 


recalled having no concerns over classification or mishandling of documents 
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(U/ /FOUO ) Notes of the interview and the documents displayed fojj^ 
an FD340 envelope and filed with the captioned investigation. 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 2/1/2016 


On January 29, 2016 


date of birth 


interview ed by Federal Bureau of Investigation (FBI) Special Agents 


at Starbucks Cafe, 3 70 7 lh Ave. New York, NY 10001. Representing! 


present for the interview, was 


landf 


was 


Attorney at Law, telephone (202 


advised of the identities of the interviewing agents and the purpose of the interview 
provided the following information: 


and also 


After bei ng 


(U//F0Wef 


joined the Department of State CPoSI iil 


JAKE SULLIVAN. 


TThereafter she be came the 

left the DoS in ) to work for th<£ 


las a Special Assis tant for 
I under 


(u//F©«e{ 


provided that as a Special Assistant at DoS she was a political 
appointee. Upon starting at DoS she was svy orn in and then received the standard on-boarding and 


security trainings. However, 
Information Act (FOIA) or t 


he Federal Records Act. 


Jcould not recall any specific training about the Freedom of 


(U/ /FQUO) 

'other devices that slie used 


Inpypr fr avpled with CLINTON and had no knowledge of her iPad or 
|did not have direct conta ct with CLINTO N while she was at ' 


cnew that CLINTON 


DoS and did not email directly with her until after she had left DoS] 
was usin g a personal ema il account but did not know that it was a potential issue until she read about it in 
the press] ^vas unaware of an official policy at DoS regarding the use of personal email 

accounts and recalled that other people on CLINTON’S staff would use their personal emails periodically. 


(U// TOUO ) 



learance while at DoS and received training on the 
routinely handled classified information on the 


handling of classified information! 
f.la.ssNpt sv.stpm but did not know how such information was transferred from SULLIVAN or 
Hto CLINTON. 


(U// TOUO) ZFS is a Limited Liability Corporation (LLP that was established for the Office of 
Hillary Rodham Clinton, by 


(U// FOUO ) When 


based in Washington, D.C. ad 


iliijinally joined the] 

The office then moved to New Y ork city i 


JiLmas- 


Investigalion on , 
File# 


2/1/2016 
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New York City. NY 
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everybody had to work from home until 


OJ/7 FQUO ) 


articles. She was later promoted to th 
positions of the following individuals 
that time period: 


was originally anjj 
e for a 

»^who[ 


at tlid 


]3nd was primarily responsibl e for arranging nhone calls, drafting mem os and summarizing news 

[provided the names and 


during 


HUMA ABEDIN - Chief of Staff 
MONICA HANLEY - Pereonal Assistant 


ruAfewf 


Inrovided that P latte River Networks (PRN) provided IT sup port to the 


J frequently spoke with 


about routine matters such as purchasing laptops and maintaining the IT systems. 

mmI _ 


from PRN, 


no recollection of ever receiving a laptop from PRN or 


spoke with HANLEY regarding this matter approximately one month ago 
and then review ed her email records to see if she had any fiirther information about the laptop. 

found one email between her and HANLEY in whic h they discussed sending the laptop to 
PRN. However, the discussio n transitioned fro m email to phone anc j had no further 

recollection on what occurred. | noted that this occurred during the period when everybody 


was working from home due to the aforementioned lease issue. T herefore, i f the laptop was shipped to her 
she would have had it sent to her apartment. She further noted that |was r esponsible for op ening 


the mail for the office but that he would not have opened anything directed to her 
speculated that perhaps it was shipped to the Clinton Foundation in New York City but she did not know 
what they would have done with it. 
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(U//F OUO ) Following the interview 
chain with PRN to the FBI. On February 3, 
email to SA 



"[agreed to provide the above referenced email 
counsel electronically provided the 


(U//FOUO) A copy of the original interview notes and the email provided by| 
attached in a 1 A envelope. 


are 
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FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 08/10/2015 


20037., telephon e f 2Q2 f 


to the Inspector General, United States Department of State, Office 
of Inspector General f STATF. IG) 2121 Virginia Avenue, NW, Suite 8100, SA-3, Washington, DC 

email |a).state.gov was interviewed in person by FBI Special 

After being advised of the identity of the interviewing 
provided the following information: 


Agents 


]^d[ 


Agents and the nature of the interviewl 


In early March 2015, the New York Times published an article about Secretary Clinton’s personal 
email account while at the Department of State. The article alleged Secretary Clinton used a personal 
email account to conduct official government business in violation of federal laws. Sometime thereafter, 
John KERRY, Secretary of State, sent STATE IG a letter requesting a review of email and records 
management at the Department of State. On or about March 1 2, 201 5, STATE IG and Office of the 
Inspector General of the Intelligence Community (ICIG) received letters from Congress requesting a 
review of State Department employees’ use of personal email for official purposes and coordination with 
relevant agencies to determine whether classified information was transmitted or received by State 
Department employees over personal systems. 


b6 

b7C 


STATE IG initiated a review of the use of personal communications hardware and software by 
five Secretaries of State and their immediate staff's. The review went as far back as former Secretary 
Madeleine ALBRIGHT. In Fall 2014, the Department of State wrote to the last four Secretaries of State 
asking whether they had any official email in their personal records. The Department of State issued 
preservation requests, asking each former Secretary to preserve all electronic data they had while at the 
Department of State. Secretary Colin POWELL responded that he used an America on Line (AOL) 
account. Secretary ALBRIGHT reported that she did not have personal accounts with official records. 
Secretary Condoleezza RICE reported having a Gmail account, which she did not use for official 
purposes. 

In response to the preservation request. Secretary Clinton’s attorney, David KENDALL wrote a 
letter to STATE IG stating Williams & Connolly, LLP was in possession of three thumb drives with 
Secretary Clinton’s email from her private network. KENDALL and Katherine TURNER were the only 
people at the firm with access to the thumb drives. The letter further stated Platte River Networks was in 
possession of the server and had been made aware of the preservation request. 


Investigation on 08/07/2015 


at 


Washington. DC 
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In December 2014, Williams & Connolly, LLP produced twelve boxes, approximately fifty five 
thousand pages of about thirty thousand emails to the Department of State from Secretary Clinton’s 
private server. There is a court order in place, which requires all thirty thousand emails to be released by 
January' 30, 2016. The emails have to be released on a monthly basis. The emails are released based on 
select percentages. Thus far, two waves of Secretary Clinton’s emails have been released on the FOIA 
website. Department of State had about fifty to sixty people working on Secretary Clinton’s emails for the 
FOIA review process. 


Upon receipt of the emails, they were scanned, entered to the OCR process and then uploaded to 
Department’s of State ClassNet system, which was classified up to SECRET. The emails were then 
divided into sub-groups. Then each email went through the FOIA process to determine the appropriate 
FOIA exemptions, if any. Ultimately, the emails were publicly released. Initially, senior State Department 
officials were being used to review the emails. The officials would review the email, identify which State 
Department equity worked on the information, and would then send the email to that department. The 
receiving department would then identify certain exemptions and/or send to other agencies, if other 
agency equities were involved. The emails would come back to Department of State for further review 
and were ultimately reviewed on the FOIA website. The B (1) exemption was used to protect sensitive 
Department of State equities. B (5) exemptions were used to redact internal deliberations. B (6) 
exemptions were used to redact Personally Identifiable Information (PII). 


STATE 1G brought in I CIG to assist with the i dentification of classified information and to take a look 


at the FOIA re view process 
review process 
process 


]from ICIG reviewed Department of STATE’S FOIA 


brought broader experience to Department of State’s assembly line review 


lquickly determined Department of State needed to make some changes to their review 


process. On or about June 19, 2015 STATE IG and ICIG jointly made four recommendations to the State 
Department related to the FOIA review process. The recommendations were as follows: 


1 . Recommend State Department FOIA office request staff support from IC FOIA offices to assist in 
the identification of intelligence community equities; 

2. Recommend IC FOIA officers review the emails to ensure that ClassNet use is appropriate before 
transmitting to the State Bureaus for review; 

3. Recommend State Department FOIA seek classification expertise from the interagency to act as a 
final arbiter if there is a question regarding potentially classified materials; and 

4. Recommend State Department FOIA Office incorporate the Department of Justice into the FOIA 
process to ensure the legal sufficiency review of the FOIA exemptions and redactions. 

Patrick KENNEDY, Under Secretary for Management, U.S. Department of State was a key figure in 
all of this. KENNEDY accepted FOIA recommendations number one and three on behalf of the 
Department of State. During a July 2015 meeting with STATE IG and KENNEDY, KENNEDY said 
something to the effect “We sent our folks from Diplomatic Security (DS) to conduct a security 
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assessment of Williams & Connolly”. DS concluded Williams & Connolly had procedures in place to 
secure the three thumb drives. KENNEDY mentioned Williams & Connolly handled the General Petreaus 
investigation, so they had the appropriate clearances and were safe. STATE IG left that meeting with the 
impression that Department of State had an electronic copy of Secretary Clinton’s emails. Later, STATE 
IG was told that Department of State did not have an electronic copy. STATE IG still would like to obtain 
an electronic copy of the thumb drives. 

STATE IG’s review focused on the following areas: 

1 ) Preservation of Records 

a. Are records being preserved for archival purposes? 

b. Are appropriate systems in place for Freedom of Information Act (FOIA) purposes? 

c. Are records being kept in line with the Federal Records Act? 

2) On-Boarding Process 

a. How are methods of communications established for new Secretaries? 

b. Each Secretary may like various devices, how does Department of State make those devices 
secure for usage at Department of State? 

c. How had Department of State addressed security issues? 

d. How did State Department set up secure phone line at Secretary Clinton’s house? 

e. What precautions were in place for personal devices? 

3) Records Creation Designation 

a. How does State Department make sure draft documents get captured in Department of State’s 
records retrieval process? 

4) How has Department of State handled FOIA and the Congressional Process? 

| j opined Department of State’s record keeping process was not good. Prior to the last couple 

of years, record keeping was done on a print and file basis. Literally, if someone wanted something to be 
kept as an official file, that person would have to print the document and request another person file it 
away. STATE IG was in the process of taking a deep dive into the on-boarding process of Secretary 
Clinton’s server. 

Secretary Clinton preferred to u se Black berries. In fact, she had at least two email accounts that 
went directly to her blackberry account ]* | was not sure whether Secretary Clinton had an 
Information Technology (IT) infrastructure from her time in the U.S. Senate or her presidential campaign. 
Bryan PAGLIANO worked in IT support for Secretary Clinton’s campaign. Shortly after Secretary 
Clinton started her tenure at Department of State, PAGLIANO was hired as a Schedule C, directly 
reporting to Secretary Clinton. PAGLIANO set up Secretary Clinton’s personal server and provided her 
direct IT support. PAGLIANO left the Department of State sometime in 2013 and came back in early 
2015 as a contractor. STATE IG contacted PAGLIANO as part of STATE IG’s ongoing review. STATE 
IG was informed PAGLIANO was represented by attorneys from Akin Gump Straus Hauer & Feld, LLP. 
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PAGL1ANO refused to talk without being granted immunity from prosecution. 


Secretary Clinton had at least two AT&T blackberry accounts. The first account was the HR15 
email account. In September 2013, there was an article about Sydney BLUMENTHAL having his email 
account hacked. Apparently Secretary Clinton's HR 15 account was cited in that article. As a result, 
Secretary Clinton changed her email to HRD 14. 


| | believed that Secretary Clinton's server at some point was held at her Chappaqua 
residence. Departmen t of Stat e would send an advance team to set up Secretary Clinton’s communications 

wherever she neededJ did not know who paid for the server. Huma ABED1N and Cheryl MILLS 

were the conduits for contacting Secretary Clinton. Only a few people at the Department of State were 
able to contact Secretary Clinton directly. 


As part of STATE IG’s ongoing review 
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1) 

2) 

3) 


b5 per DOS 


p-ecommended the FBI talk- to PAGLIANO 


Department of State employees 




and 


who were all 


was willing to provide the FBI with assistance as necessary. 


b6 

b7C 


b6 

b7C 


b6 

b7C 




ALL FBI INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 10-12-201 £ BY J37J83T34 NS ICC 


FD-302a (Rev. JO-6-95) 


- 1 - 




FEDERAL BUREAU OF INVESTIGATION 


Date of transcription 6/3/2016 


n i //P OT On June 3, 2016, Department of State (DoS j 

I was interviewed by Federal Burea u of Investigation (FBI) SpeciaL Agent? 


H 


in his office located 


:ait| 

at[ 


? 


Virginia. After being advis ed of the identities of the interviewing agents, and the purpose of the 
interview, 


provided the following information: 


tQ 


n i// 


was thd 


to include during the tenure of fo 
POWELL, and HILLARY R. CLINTON at D oS 


3 t 


fro 

er Secretary of S tate CONDOLEEZZA RI 
most recently reported to 


i 


E, COLIN 


(u//F©y©)[ 


'S ''S M 

(IT) Operations for DoS. T his included, but was not li mited to, software applications, hardware, 

' ' r .. I It-, o t. c r> n i / 


telecommunications, email. 


]DoS Information Resource Management (IRM). 


(U//F©U©J 


lprovided IT briefings t o CLINTON’S trans ition team upon their 

** . .. I 1 M 7/MTX 


i r v • — D r 

arrival, however, the DoS executive office did not fall under] responsibility. JOHN 

BFNTF.L who oversaw Executive Secre tariat Information Resource Management (S/ES- IRM), would 
have been! I in regards to managing IT programs for executive management. 


(U// FOUO ) Around the time of CLIN TON’S onboard tr ansition, PATRICK KENNEDY, Under 

Secretary of State for Management, suggested ! 1 intervie w BRYAN PAGLIANO, who 

served on CLINTON’S 2012 Presidential Campaign. ! M | interviewed 

PAGLIANO. wh o had a MBA from the Universit y of Maryland. Alte r interviewing PAGLIANO, 
^agreed he would be a good fit for | fr eam. PAGLIANO was 


subsequently hired on to DoS in a Schedule C position, and was tasked with assisting mainly with cost 
recovery planning and researching DoS technical enhancement opportunities. 


(U/ /FOU6 ) 


was not aware PAGLIAN O had a secondary role of providing 


was aware PAGLIANO came from 

milieu aujuuurvc v-'a-'aa ’ - * ».»..*-> **0. 1 ^ ^ 

CLINTON’S campaign, he noted PAGLIANO did not have any overtly apparent ties to the 7 floor [a 


technical assistance to CLINTON. Althougq 

CLINTON’S campaign, he noted PAGLIANO v 

reference to whe re CLINTON’S ex ecutive suite was located at DoS]. ! ^ 

incident wherein! vas dealing with a matter that needed input from the 

1 ■ i i i . •.! • i: : J.. i_ .u„ "7th I 


PAGLIANO mentioned he occasionally had contact with individuals on the 7 th floor. 


only recalled one 
7 th floor, and 
PAGLIANO 
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offered to reach out to his 7 th floor contacts, but£ 


Dismissed the offer and proceeded 

through regular channels. As a Schedule C hire, PAGUANO would have been required to report any 
additional income he received from side work with CLINTON. 


(u//-Feeo) 


was not aware of, nor did he have any discussions w ith PAGUANO 


did not have 


concerning CLINTON’S use of a private email account or email server.| 4 

direct correspondence with CLINTON, and learned of her use of a private email server when he read 
about it in the New York Times. 


(U//FOW©) It was 


understanding that DoS policy “discourages" the use of 


private email, but does not prohibit it. 


Iwas not aware of the specific IT setup in either CLINTO N’S offi ce or 


(U//F©Ue)| 

her residences How ever, he believed both o f CLINTON’S residences had a DoS Secure Fax 
and/or 1 I may h ave had kn owledge of her off ice setup. 


was assigne d to the “help desk ." anc( 


the 7 th floor. 


also assessed 


nave naa Kno 
1 worked fo£ 
and 


as to what DoS IT equipment was installed at both of CLINTON’S residences 

technician who would know who installed DoS equipment at the Secretary’s homes. 




but later went to work on 


m^y ? 1 sq 


lave more insight 
was an IRM 


(U// FOU O) The State Messaging and Archival Retrieval Toolset (SMART) records management 
system was implemented by IRM as a result of recommendations from a DoS Executive Steering 
Committee. SMART replace d DoS's telegraph system, and was developed to automate / streamline the 
process for archiving records ] | was involved in discussions about the development and 

rollout of SMART, as were representatives from SES. Representatives from the Executive Secretariat 
asked to be the last to rec eive the SMART r ollout. However, ultimately SMART was never rolled out to 
the Executive Secretariat. | could not recall exactly when SMART was implemented at 

DoS, however, he assessed SMART was rolled out sometime in 2007 - 2008. 

(U//F QU Q) A copy of the original interview notes are attached in a 1 A envelope. 
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SSAN 


£IlZZ£Qfcim_pn May 10, 20 16^ 
_|w* 


was intervi ewed by Federt 
at his residence. 


DOB | [ telephone 20 

1 Bureau of Investigation (FBI) Sp ecial Agentsl 


advised of the identities of the interviewing agents, and the purpose of the interview, 
following information: 


M D. After being 


provided the 


(U/ /FOUO )[ 


served as 


of State / DoS) fr om the beginning of KERR Y'S tenure to 


berved as 


Relations Committee. 


Prior to joining DoS, 
Iwhen KERRY was the Chairman of the Senate Foreign 


lat the Department 


(U//FOW©) A lot of information would fl ow throug h! 
information concerning Congressional Oversight. 


gb| ^n route to KERRY, to include 

[was tangentially i nvolved i n the process of 

production of DoS records to the Benghazi Committee, in that KERRY askeq Ito ensur e the 


Committee did not face any DoS roadblocks in response to the request. Furthermore ! | wa nted to 


% 


make certain DoS was as comprehensive as possible in their response to the Committee’s request 
was primarily concerned with KERRY being questioned by the Committee over the totality of the’ 
production, and thus wanted to cover every production avenue possible to avoid KERRY being blindsided 
if called to testify to the Committee. The production of documents related to Benghazi began in the 
spring (April/May) of 2013 and continued as a “rolling production.” 


(U//F0W©)[ 


was not aware former Secretary of State HILLARY R. CLINTON was using a 
private email account until 2013, when he recalled hearing news of her em ail accoun t potentially being 


■» ^ ■ * » & 

compromised as a result of a hack into Sidney Blumenthal’s email account. | advised KERRY to 


use a government email account w hen he became Secretary of State, despite what previous Secretary’s 


may have chosen to do: 
maintained on a private server. 


Jwas not aware until recently that CLINTON’S private email account was 


(U/ /FOUO) 


[ ecalled se eing Beng hazi production documents containing CLINTON’S 
personal email beginning in early 2014 | | did not recall having any concerns after seeing that 

CLINTON used a personal email account, as he was aware other Secretary’s of State had done the same. 
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(U// POUO ) In August or September of 20141 


went to Capitol Hill to mee t with the staff 

members of the Benghazi Committee, in preparation for a pending hearing with KERRY recalled 

the topic of issue in his meeting with the committee staff .s urrounded inquiries regarding the preservation 

of records, Following his meeting with the committee staff} [contacted CHERYL MILLS to advise 

of possib le leaks from the committee referencing their production concerns related t o CLINT ON’S email. 

Irecalled at least o ne phone conversation with MIL LS concerning the matter. | [also spoke 

with] |fron 

some visibility in the matter, asl 



also had 


t 


(U// F0U 6) In approximately Decem ber of 20 4,| | recalled a large number of printed 

was surprised at the vo lume of emails produced 


CLINTON emails being dropped off at DoS ( , r 

and believ ed the production to be close to 50.000 p ages. Two attorneys from[ 

Last Na me Unknown (LNU) and |LNU [believed to be a reference to| 


[ were bro ught onto DoS to 
describe' 



and 


and coordinate the redactions in regards to 

Benghazi FOIA production.] [described] |as someone who would be “encyclopedic” 

concerning the process of production regarding Bengh azi, to include the production of CLINTON’S 


email. DoS 


was also involved with the DoS production and 


review process as it pertained to CLINTON’S emails and Benghazi as a whole. PATRICK KENNEDY, 
DoS Under Secretary for Management, also had insight into the production process. 

(U// FQUO ) During the course of the Benghazi production, DoS recognized there was a gap in 
records related to emails pertaining to not only CLINTON, but other former Secretaries of State who did 
not use DoS email accounts. As such, Executive Secretary JOSEPH McMANUS drafted a letter in 
October 2014, requesting former Secretaries produce any personal emails responsive to the Federal 
Records Act in attempt to retroactively address the gap in DoS records. 

was not involv ed with the discussions or the process concerning how the 


email production was conducted.! 


did not provide direction on how the emails should be 


produced, nor did he have any knowled ge of wha t methodology was used in determining what emails 
were responsive to production requests. was unaware of any concerns that the original production 

of emails provided by CLINTON was not entirely comprehensive in response to the request, nor was he 
aware of any concerns that the email production might contain classified material. 
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(U//F6tfe) 


date of birtfd 


■b3 per ODNI 
b6 per FBI 
b7C per FBI 


was interviewed at the 


Office of the Inspector General of the Intelligence Community. Patriot Park. 12290 Sunrise Valiev Drive 


Re ston. Virginia 20191 . Also present during the interview were| 
and 


the interview, 


After being advised of the identity of the interviewing Agents and the nature of 
provided the following information: 




b3 per ODNI 

]had worked as an Inspector in the Office of the Inspector General of the b^per^FBi 


Intelligence Community (IC/IG) for approximately 2 years. In May 2015, IG/IC began to assist in the 
Department of State’s Inspector General’s (STATE/IG) review entitled “Use of Personal Communications 
Hardware and Software by Five Secretaries of State and Their Immediate Staffs.” This assistance was 
requested pursuant to the March 12, 2015 letter from the United States Senate. 


iUJ On or about May 28, 2015 


/ith[ 


[the 


| met witr 

Inspector General, United States Department of State (STATE) and other STATE employees in order to 
assist in completing the review. It appeared that STA TE Freedom of Information Act (FOIA) employees 


were at least already 6 weeks into the review process. 


' 'E Freedom of Information Act (FC 
. immediately recognized 


problems that 


impeded STATE’S review process. Some of the problems were 1) STATE’S computer software was at 
least 2 generations behind; 2) the optical character recognition (OCR) was faulty; and 3) STATE ^ 
employees used initials to describe organizations, as opposed to using intelligence designations. b7c P per fbi 


bund STATE FOIA employees very helpful. On various occasions many of the FOIA officials 

stayed after midnight to conduct the emairreview. 


1 U.* (£#$£) On or about May 22, 2015, STATE publicly released two hundred ninety-six e-mails 
belonging to former Secretary of State Hilary Clinton (CLINTON). The two hundred ninety-six e-mails 
were previously reviewed and released by STATE FOIA officials in response to previous FOIA requests. 
According to the Defense Intelligence Agency, National Security Agency, and National Geospatial 
Intelligence Agency officials, at least one of those un-redacted e-mails should have been treated as 


Investigation on 07/23/2015 


at 


Reston. Virginia 



This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency: it 
and iwceontents are not to be distributed outsideyow agency. 

ClassiTiedBy : F93FL2^C5l 
Derived Pro^D=f^£^NSic dated 20130301 
DeclasedTfy Dn: 20401 



b3 

b7E 


b6 

b7C 



S 



FD-302a (Rev. 10-6-95) 


S ECBEI/TBRC^^Sq^RN 


Continuation of FD-302 of Interview of] 


, On 07/23/2015 . Page 2 b3 P er ODNI 


classified. On or about June 25, 2015 the IC/IG notified the Director of National Intelligence and b6 per FBI 
members of the senate of this leak of classified information. . b7c peE 


'■A IC/IG believed that the release of the two hundred ninety-six e-mails did not comply with 

FOIA regulations. In fact, public figures were completely redacted from the TO, FROM and CC lines, in 
violation of FOIA regulations. It also appeared that no STATE FOIA personnel knew how the two 
hundred ninety-six e-mails had been selected to be released. STATE FOIA personnel indicated during the 
FOIA review process, some B1 (Classified National Security Inf ormation) were removed and changed to 
B5 FOIA exemptions (Privileged Communications). ! b elieved STATE FOIA redactions of b 3 per odni 

classified information were inappropriately designated or changed. b6 per fbi 

b7C per FBI 

!;Uj '£&&$¥) The two hundred ninety-six emails were taken from approximately fifty-five thousand 
pages of thirty thousand e-mails provided to STATE by the Law Offices of Williams & Connolly LLP, 

(William & Connolly) CLINTON’S personal counsel. According to Williams & Connolly, the firm had 
provided all of CLINTON’S work related or potentially work related e-mails from her @cIinto nemail.com 
account. Williams & Connolly also maintained a copy of the .PST file containing the electronic copy of 
the above referenced e-mails, on a thumb drive, stored in a secure safe at Williams & Connolly’s 
Washington, DC office. David Kendall (KENDALL) and Katherine Turner, Esq. (TURNER) were the 
only two people that had access to the thumb drive. The firm further advised they believed the server 
equipment used to host CLINTON’S @clintonemaiI.com account was no longer valid or active. Platte 
River Networks in Colorado maintained custody of the equipment and had received preservation notices. 


ill) IC/IG had considered serving legal process to Williams & Connolly in order to retrieve 

the thumb drive. Diplomatic Security had attempted to retrieve the thumb drive from William & 

Connolly, but were informed that since the firm had received preservation lo ners for thr- .PST files, the 

firm could not release the thumb drive to Diplomatic Security. According to | Diplomatic b 3 per odni 

Security was led to believe Williams & Connolly in fact had 3 copies of the thumb drive. b6 per FBI 

b7C per FBI 

lU) 1° December 2014, Williams & Connolly informed STATE they had fourteen boxes 

containing the approximately thirty thousand e-mails. However, when STATE officials arrived to pick up 
the boxes, STATE only received twelve boxes. IC/IG had no information as to whether Williams & 

Connolly were authorized to store classified information or if KENDALL and TURNER held security 
clearances. 


were susp icio us' of the spec 
and 




surmiS' 


ised[ 


and other STATE F OIA officials 


al appointments to STATE L egislative Affairs of attorneys 






(and other STATE FOIA n 

in the FOIA review process was abnormal. I 


involvement 

made recommendations and re quested additional cha pges that were not routine] 


both previously had worked at 


T- 


which appeared to create a conflict of interest. 


b3 per ODNI 
b6 per FBI 
|b7C per FBI 


|anc 

1 

and 
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b3 per ODNI 
b6 per FBI 
b7C per FBI 


involved in the Lois Lemer, Internal Revenue Service situation. 


and was possibly^ per ODNI 

b6 per FBI 
b7C per FBI 


‘ v-- 

(U//FOUO) On or about June 15, 2015 IC/IG sent a letter to STATE/IG documenting potential issues 
identified in the Preliminary Review of the State Department FOIA Process. The recommendations were: 


1 . Recommend State Department FOIA office request staff support from IC FOIA offices to assist in 
the identification of intelligence community equities; 

2. Recommend IC FOIA officers review the email to ensure that ClassNet use is appropriate before 
transmitting to the State Bureaus for review; 

3. Recommend State Department FOIA seek classification expertise from the interagency to act as a 
final arbiter if there is a question regarding potentially classified materials; 

4. Recommend State Department FOIA Office incorporate the Department of Justice into the FOIA 
process to ensure the legal sufficiency review of the FOIA exemptions and redactions; b3 per odni 

On or about Jun e 26-27 
additional classified e-mails 


-2D 15, a review of the thirty thousand e-mails revealed five 


3 


b6 per FBI 
b7C per FBI 


used key word searches in order to review the e-mail. It appeared 


that one in every five e-mail addresses were not a .GOV e-mail address. In the thirty thousand e-mails 
there were about seventeen unsigned classification upgrade memorandums. These memorandums were 
packages of information which were being held for the Assistant Secretary of State for Administration’s 
signature. 


On or about July 1, 2015, IC/IG officials met with Patrick Kennedy, Under Secretary of State 
for Management and other STATE representatives. IC/IG informed STATE that ir/rr, vvm.M ass i st 


STATE/IG conduct the review, whether or not STATE welcomed IC/IG’s input. 


£ 


lleged 


b3 

b6 


STATE made several misrepresentations during this meeting. One such statement made by STATE’S b 7 c 


per 

per 


ODNI 

FBI 


legal counsel was “there were no classified information contained in the thirty thousand e-mails 
was willing to assist the FBI further as needed. 


per FBI 


b3 per ODNI 
b6 per FBI 
b7C per FBI 
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In 


Jh 


began working for STATE IG inf 


e became 


lasf 


"[Evaluations 


and Special Projects unit, which consisted of appro ximately 10 people f rom both STATE IG and the 
Intelligence Community Inspector General (ICIG). | ~| worked on Congressional requests 

and other special inquiries that are handled by STATE IG, which included a special project related to the 
Freedom of Information Act (FOIA) process as a whole. 


|STATE IG were in the process of conducting a review at STATE, focused on 

three main areas. Those areas were how 1) STATE records are preserved; 2) how STATE employees 
handled the FOIA process; and 3) the on-boarding process for new STATE employees, specific to 


methods of co mmunication, with an emphasis on the Secretaries of State. As part of that review, 
^pent a questionnaire in late March 2015 to the former Secretaries of State Madeleine 


ALBRIGHT, Colin POWELL, Condoleezza RICE, and Hillary CLINTON along with current Secretary 
of State John KERRY. The questionnaire specifically asked them about their use of personal email for 
work purposes. 

On April 15, 2015 STATE IG sent out requests to a broad number of STATE-related persons, 
including former staff members and others who may have sent or received work-related emails to or from 
the personal email accounts of the former Secretaries of State. The request asked for personal emails and 

any policy or training given related to the use of personal email for business purposes. had 

not yet received any email files from any of the staff members of the former Secretaries of State and was 
told that there would be no response to the request by the attorney of Bryan PAGLIANO, former 
information technology advisor for CLINTON. 


CLINTON sent out an all-staff cable that personal email should not be used day-to-day for 
business purposes and that personal email is not secure, so do not use them for business purposes. To the 
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recollection, CLINTON sent that cable out in 2009. After CLINTON’S time as 
Secretary of State, there was also STATE guidance that if STATE employees had to use their personal 
email for business purposes they should send a carbon copy (Cc) to their “.gov” work email as well. 


In August 2014, STATE Under Secretary' for Management Patrick KENNEDY sent out a 
memorandum for STATE employees not to use personal email for business purposes, but it did not 
address whether personal servers may be used for business purposes. There was STATE guidance that all 
information/emails related to work should be on an “approved automated system,” but there was no 


known STATE guid ance regarding 
official “finding” by 
STATE IG. 


:he use of personal servers to conduct business. That wall be an 
colleague 


| stated | [ interviewed PAGLIANO’s former boss while at STATE, and 

PAGLIANO’s former boss was unaware PAGLIANO set-up CLINTON’S personal work server for her. 
There were no on-boarding policies in place to prevent what happened related to CLINTON using a 
personal server. STATE IG was unsure what, if any, site survey or systems security and maintenance 
checks were conducted prior to the installation of CLINTON’S server by PAGLIANO. STATE IG was 
also unsure if anyone else other than STATE employees knew of, ever saw, or had access to the server. 


All of STATE’S top officials’ email records related to their “.gov” emails were being preserved, or 
“journaled,” no matter what. Most STATE employees, those not considered top officials, could create 
email records themselves using the SMART system. The onus was on the regular STATE employees to 
self-determine what a record is and if they didn’t use the SMART system and they’ve double-deleted the 
email, it was more than likely not going to be preserved. 


Regarding STATE IG’s review and interaction with KENNEDY, 


had met 


KENNEDY several times, and stated KENNEDY was never overly uncooperative and never did anything 


unusual with regards to his cooperation , However. K 
positive when dealing with STATE IG. 


NNEDY’s tone and tenor were definitely not 
Iso attended meetings with KENNEDY in the past 


that discussed general goals going forward for STATE with regards to STATE IG’s review. 


| |review led her to interview STATE officials who worked the FOIA process from 

within the Bureau of Administration, Office of Information Programs and Services, which fell under 
KENNEDY’S purview. Some FOIA officials have seen events and behaviors they did not like or that 
made them uncomfortable, to include KENNEDY’S attitude toward them and how they handled the FOIA 
process related to CLINTON. Additionally, there was a request from the FOIA officials to STATE 
employees that asked for any emails sent to or from personal email accounts related to the CLINTON 
FOIA request. Some STATE employees responded they had no emails that fit the request; despite the 
negative response, for some STATE employees, FOIA officials knew there were at least some emails that 
should have been included in their response because the FOIA officials had already reviewed those emails 
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from within the batch of 30.000 CLINTON-related emails. Despite knowing some STATE employees 
had not responded correctly, the FOIA officials had no recourse to compel a positive response. 

For the FOIA request related to the 30,000 CLINTON-related emails and the Congressional 
inquiry that req uested Benghaz i-related emails, those review process were handled outside the normal 


chain of peonkiX 
people, but 


b6 

b7C 


b6 

b7C 


did not know whv these requests were ha ndled outside the normal chain of 

b5 per DOS 


recommended the FBI talk to | | for more information on events discussed 
above and for names of other people the FBI would be interested in talking with regarding the same. 
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(U//FOUO) On May 25, 20 16,[ 


Special Agent, United States Secret Servi ce 


(USSST was in terviewed bv Fede ral Bureau of Investigation (FBI) Special Agents (SA) 


and SA^ 


Also presen t for the intervie w was a Federal Law Enforcement 


Association (FLEOA) Attorney and USSS SA 
interviewing agents and the nature of the interview 


iAfter being advised of the identity of the 
provided the following information: 




_kvas assig ned to the prote ctive detail of WILLIAM CLINTON from 
jBecause of[ 


Jnformation technology (IT) s kills, he was as ked 


to do network assessmen ts and troubleshoot IT issues at the Clinton Foundation. From! 


to 

assisted the Clinton Foundation in a case related to theft of information on the 


Clinton Foundation information systems. 


(U/ /FOUO )[ 


]vas contacted by JUSTIN COOPER in Janua ry 2011 to as sist with the 


security of an email server at the Clinton residence in Chappaqua, Ne w York 
physically or remotely access the server in the residence at Chappaqua^ 


hardware components of the server or software installed on the server 

research relating to the security of email s ervers and co ntacted BRYAN PAGLIANO to recommend 
adding outbound IP filterin g to the server . 


information from COOPERj 
located in Chappaqua. 


5 


,did not 

_Jwas not aware of the 
Jconducted open source 


received PAGLIANO’ s name and contact 
was aware of no other information pertaining to the email server 


b6 

b7C 


b6 

b7C 


b6 

b7C 


(U/ /FOUQ ) Notes of the interview will be maintained in a FD340 envelope and filed with the 
captioned investigation. 
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The DoS email system uses a hub and spoke configuration. There are approximately 120,000 
mailboxes on the system, of which approximately 95,000 are for unique users. The other 25,000 
mailboxes are general mailboxes and aren’t assigned to a specific user. Approximately 35,000 mailboxes 
reside on the local hub and are administered by Information Resource Management (IRM). The 
remainder of the mailboxes reside on spokes within the system and are not controlled by IRM. Spoke 
mailboxes, such as those at overseas posts, are administered by the local Information Security Officer and 
backup procedures vary by site. 


Upon receiving the preservation request from the FBI, IRM preserved and thereafter exported the 
mailboxes for all of the individuals listed on the request whose mailboxes are on the IRM system. 

estimated that approximately 400 of the 900 accounts listed on the preservation request are 


active users on the IRM system, with the other accounts residing on spokes, POEMS, or are associated 
with users who are no longer at DoS. Each exported mailbox includes ail of the active mail folders as 
well as any items in the Recoverable Items storage area of Microsoft Exchange, which retains items for 90 
days after they are deleted by the user. The export does not include any files, or mailboxes, that may have 
been archived by the user to their local desktop. 


The IRM operating system is backed up and retained for approximately 30 days. However, the 
email database is not part of the backup. For email recovery, IRM uses Database Availability Groups 
(DAG) whereby five dynamic copies of each mailbox are maintained, at two sites, to allow the system to 
be quickly restored if the primary database fails. 


opined that the exported mailboxes were unlikely to contain many emails from prior to 

2012. Prior to that time mailboxes were limited to 500MB of data and users were regularly required to 
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■ On 09/17/2015 . Page 


delete old emails, or to create Personal Storage Folders (.pst files), when they hit the storage limit. 
Between 2012 and 2013, the storage limits were increased to 5GB. 


IRM uses the State Messaging and Archival Retrieval Tool (SMART) to archive record emails. 
The system was impleme nted in phase s between 2008 and 2010 and replaced CableXpress for archiving 

cables and record emails.| noted that communications sent to an embassy are referred to as a 

cable and emails sent to a person are record emails. SMART requires the users to identify an email as 
meeting the record standard and then selecting the appropriate SMART tags within Outlook while 
composing the email. The period of retention for a SMART record is dependent on the tags selected by 
the user. 


use the, 
nolicv 


5 USRiai 


p rovided that S/ES-IRM, also commonly referred to as the POEMS system, does not 
syst em to archive email records. They are instead obligated to follow the ‘print and file’ 
^ [ further noted that records for senior officials are archived when they leave office. 

Jrecommended contacting Deputy Assistant Secretary MARGERET (PEGGY) GRAFELD, 


Deputy Assistant Secretary for Global Information Services (A/GIS) for more information on this 
process. 

The Bureau of Intellig ence and Rese arch (INR) i s responsible for a dministering the mailbox es on 


the top secret network at DoS. 

be able to provide further details on INR and the top secret mail system. 


provided that! 


J telephone 202[ 


would 
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Date of transcription 09/22/20 1 5 


On September 2 3 , 20 1 5 J 

Department of State (STATE), Office of Inspector General (OIG), Offi 

N. Mo ore Street, S uite 800, A rlington. VA 22209, office telephone 70 

email addres] [Estate. g ov called the write r. Information Technology 



United States 
igation s, 1700 
fax 703 


I ,J 1 V-S 

Specialist/Forensic Examiner (ITS/FE)[ 


Computer Analysis Response Team (CART). 


of the Washington Field Office (WFO) 


b6 

b7C 


to provi de general inf ormation regarding a group of fifty (50) 
Jduring his review of the Microsoft 


The writer asked 

email messages of interest that were found by[ 

Outlook Personal Sto rage Folders (.pst files, or “mailboxes”) for HUMA M. ABEDIN and 

CHERYL D. MILLS] Jconfirmed that the Federal Bureau of Investigation (FBI) 

xamausly-receLYed a full copy of the two (2) mailboxes on a Lexar thumb drive provided by 
Jffom STATE. 


and 


J 


stated that he performed a search across the email data for the words “Secret” 
OFORN” using a search.Rf.Qgra^ called “Perceptive Search” and that the search returned 


fifty documents of interest 


carciL, Program 

. |b 


believed that most of the search hits appeared within the 


metadata of Microsoft Word documents, which he identified as “Call Sheets,” or doc uments 
provided to the Secretary of State prior to attending briefings with foreign dignitaries] 

L.ll. J it. .. L!.. . J • .1 • .y . ^ W , . . . 


believed the search hits appeared within the metadata of the documents and not within the actual 
content of th e documents. The identified documents were sent as attachments to emails. 

could not remember if there were also search hits within any email messages. 


believed that the documents may have been generated from a classified system 


and that at some point they may have been moved to an unclassified system. However, he was 
unsure whether the “Secret” and “NOFORN” marki ngs would ha ve been generated automatically 
by the system that was used to create the documents.! Istated that STATE had not yet 

determined how the documents would have been marked with regard to classification. 


The writer requested tha ^ provide the FBI with the fil e names and. Message- 

Digest algorithm 5 (MD5) hash values for the files identified by STATE. ] I advised that 

STATE was in the process of moving the email data onto a stand-alone computer within a 
Sensitive Compartmented Information Facility (SCIF) and that he anticipated this would happen 
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■ — r— | .. wu 

toward the end of the week (q h PI around Senmmh er ?01 
coordinate with 
nai 


On. 09/2 1 / 2 Q 15. Page 


email addres: 


| 


stated that he would 


t I OIG, STATE, telephone 703- 

^state.gov to obtain and provide the FBI with the MD5 hash 


values ot the identified files and that he would contact the writer when this process was complete. 
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(U// FO(j O) On June 23 2016 
tdenhnnicallv interv iewed by Federal Bureau of 
Also present for the call wasl 


\ date of birthf 


nvestieation (FB I) Spec ial Agent; 
jxmnsel 


I was 


and 

Attorney at 


Law After bein g advised of the identities of the interviewing agents and the purpose of the interview, 
provided the following information: 


(U/ /FOlW 


was shipped ny, 
April of 201 4[^ 


had no new information regarding the whereabouts of the laptop that 
from Platte River Networks (PRN) to the Clinton Foundation in 


was not sure who the mailroom manager for th e Clinton Found ation was at 


that time but offered to contact the foundation to inquire about the shipment . 

that the address of the Clinton Foundation was 1271 Avenue of the Americas, 42 

10020 . 


lconfirmed 

,,u Floor, New York, NY 


(U//F QU 6) Following her January 2016 inte rview] 
from April 2014 with the subject “RE: HRC emails.' j_ 



rovided the FBI an email chain 
had not reviewed the email chain 

he chain to 


email archive via the intern et. However] 


prior to this ca| l and could not immediately access the email so the interview ing agent read 
ring a discu 

archive remotely thereafter.! 


:o refresh her memory . Upon hearing the content of the email, provided that 

she recalled having a discussion with | I abo ut remotely accessing the HILLARY CLINTON 

mam I 1 


could not recall if she actually accessed the email 


[ mum iLLaii ii dii^ ac/iuauj iuv v 

Jbelieved that she may have taken notes about the process 


during the call and agreed to check her personal records for any relevant information. 

(U// rOUO ) A copy of the original interview notes and the referenced email are attached in a 1 A 
envelope. 
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On October 27, 2015, | | a Special Agent with 

Homeland Security Investigations (HSI ) , Depar tment of Homeland 
Security (DHS) , Norfolk Virginia, (757) | was interviewed at 

the Norfolk Federal Building. After being advised of the iden tity of 
the interviewing Agent and the nature of the interview, 
provided the following information: 


| was previously employed as an Agent at the Department of 

State, Bureau of Diplomatic Security (DS) , and assigned to f ormer 
Secretary of State Rice's personal protection detail from until 

January 2009. In Januar y 2009 h e was reassigned to former Secret ary of 

St.ate | Clinton's detail. served on Clinton's detail until 

[ •/hen he left the Department of State. 

Clinton's tenure at State brought about significant changes to 
established security and diplomatic protocols owing to the dis similar 
management styles and attitudes between Rice and Clinton, 
claimed that his time on Clinton's detail was short and that he had no 
information to offer with regard to security violations or mish andling 
of classified information on the part of Clinton or her staff. [ 
advised his recollections were vague regarding his time on Clinton' s 
detail and that he could not recall specific events with clarity. 

was aware that a Blackberry phone was kept in a desk drawer in 

Clinton' s SCIF but could not say with any degree of certainty that the 
phone belonged to Clinton or that storing i t in the SCIF was a 
security violation. provided the name . of 

a former ASAC on Clinton's security deta il as s omeone who may be in a 
position to provide addit ional insight. was not familiar with 

the current whereabouts of | | 
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On November 6, 20 1 5, 


JSenior Special Agent, 


Office of Investigations, Offic e of the Insp ector G eneral ('OIC'^) . United States Department of State 
(STATE), off ice telephone 70^ 

Estate. gov called 


isneelor General (QIG,) 

J cell 20^ 

Tlnformation Techno c 


email address 


UTS7FET 

(FBI) Computer Analysis Response Team (CART). 


the writer. Information Technology Specialist/Forensic Examiner 
f the Washington Field Office (WFO) Federal Bureau of Investigation 


"j stated that he located an email containing content from a “confidential cable” 
sent from a Microsoft “Hotmail” email account to the STATE email address for Huma Abedin 
(AbedinH@state.gov) that could be found in the data contained within evidence item 1 B26 
provided by STATE to the FBI on or around August 14, 2015. Evidence item 1B26 is further 
described as a white and grey Lexar USB TO thum b drive labeled with a sticker containing the 
words "Dept of State 703-3 1 2-3856." |stated that when the email was received in 201 1, 

the information was classified and that it was supposed to be declassified in 2013 but that he did 
not know if that was the case and did not know the current classification of the document. 


On November 6, 201 5^ 


|sent the writer an email containing information to assist 

in locating the identified email in the FBI data set in evidence item 1B26. A copy of the email is 
included in a 1 A envelope. 
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